CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
EPSS
Percentile
60.9%
The gif_decode_frame function in gifdec.c in libavcodec in FFmpeg before
1.2.1 does not properly manage the disposal methods of frames, which allows
remote attackers to cause a denial of service (out-of-bounds array access
and application crash) via crafted GIF data.
Author | Note |
---|---|
mdeslaur | libav and ffmpeg codebases have diverged to the point of not being able to track both using the same CVE numbers. Marking this CVE as not-affected for libav. |