Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-9602
HistoryJan 16, 2015 - 12:00 a.m.

CVE-2014-9602

2015-01-1600:00:00
ubuntu.com
ubuntu.com
8

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

73.8%

libavcodec/xface.h in FFmpeg before 2.5.2 establishes certain digits and
words array dimensions that do not satisfy a required mathematical
relationship, which allows remote attackers to cause a denial of service
(out-of-bounds array access) or possibly have unspecified other impact via
crafted X-Face image data.

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

73.8%