Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:3414
HistoryFeb 03, 2017 - 4:37 a.m.

Denial Of Service (DoS)

2017-02-0304:37:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

FFmpeg is vulnerable to denial of service (DoS) attacks. These attacks are possible because FFmpeg does not check for a zero value of a slice height in utvideodec.c. This leads to an out-of-bounds array access through Ut Video data.

CPENameOperatorVersion
ffmpegeq2.2

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P