CVE-2015-3417

2015-04-2400:00:00

ubuntu.com

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.017 Low

EPSS

Percentile

87.6%

JSON

Use-after-free vulnerability in the ff_h264_free_tables function in
libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a
denial of service or possibly have unspecified other impact via crafted
H.264 data in an MP4 file, as demonstrated by an HTML VIDEO element that
references H.264 data.

Notes

Author	Note
mdeslaur	doesn’t appear to affected libav in precise

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchlibav< 6:9.20-0ubuntu0.14.04.1+esm1) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN