Lucene search

Veracode Vulnerability DatabaseVERACODE:3500

HistoryFeb 08, 2017 - 5:12 a.m.

Denial Of Service (DoS)

2017-02-0805:12:50

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON

FFmpeg is vulnerable to denial of service (DoS) attacks and other possible attacks. A malicious user can pass a malicious LucasArts Smush file to the system to cause a segmentation violation that can lead to the system crashing.

CPENameOperatorVersion
ffmpegeq2.2

CPE	Name	Operator	Version
	ffmpeg	eq	2.2

References

ffmpeg.org/security.html

git.videolan.org/?p=ffmpeg.git;a=commit;h=39bbdebb1ed8eb9c9b0cd6db85afde6ba89d86e4

www.securitytracker.com/id/1033483

lists.debian.org/debian-lts-announce/2018/12/msg00009.html

lists.debian.org/debian-lts-announce/2018/12/msg00010.html

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON

Related for VERACODE:3500