Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-7019
HistoryDec 09, 2013 - 12:00 a.m.

CVE-2013-7019

2013-12-0900:00:00
ubuntu.com
ubuntu.com
9

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.009

Percentile

83.0%

The get_cox function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does
not properly validate the reduction factor, which allows remote attackers
to cause a denial of service (out-of-bounds array access) or possibly have
unspecified other impact via crafted JPEG2000 data.

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.009

Percentile

83.0%