CVE-2016-20099

L-SMASH through 2.14.5 contains an infinite loop vulnerability in vc1importerprobe in importer/vc1imp.c that allows attackers to hang applications via crafted input files. Attackers can supply a file consisting only of zero bytes, which lsmashreadfile probes automatically, causing indefinite CPU...

CVE-2016-20099 L-SMASH through 2.14.5 Infinite Loop in VC-1 Importer Probe

L-SMASH through 2.14.5 contains an infinite loop vulnerability in vc1importerprobe in importer/vc1imp.c that allows attackers to hang applications via crafted input files. Attackers can supply a file consisting only of zero bytes, which lsmashreadfile probes automatically, causing indefinite CPU...

CVE-2016-20099

The L-SMASH software (versions through 2.14.5 ) is vulnerable to an infinite loop within the vc1_importer_probe() function located in importer/vc1_imp.c. This vulnerability occurs because lsmash_read_file() automatically probes input files; providing a file consisting solely of zero bytes trigger...

EUVD-2016-10915

L-SMASH through 2.14.5 contains an infinite loop vulnerability in vc1importerprobe in importer/vc1imp.c that allows attackers to hang applications via crafted input files. Attackers can supply a file consisting only of zero bytes, which lsmashreadfile probes automatically, causing indefinite CPU...