Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:3494
HistoryFeb 07, 2017 - 3:08 a.m.

Denial Of Service (DoS)

2017-02-0703:08:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

FFmpeg is vulnerable to denial of service (DoS) attacks and possibly other attacks. A malicious user can pass a malicious AVI file to the system that can cause a segmentation violation that will crash the system.

CPENameOperatorVersion
ffmpegeq2.2

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P