Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:3415
HistoryFeb 03, 2017 - 4:52 a.m.

Denial Of Service (DoS)

2017-02-0304:52:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

FFmpeg is vulnerable to denial of service (DoS) attacks. These attacks are caused by the vmd_decode function not validating the relationship between the length value and the frame width. These attacks can be caused through Sierra VMD video data.

CPENameOperatorVersion
ffmpegeq2.2

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P