Lucene search
HistoryNov 23, 2013 - 6:55 p.m.
CVE-2013-0860
cve-2013-0860
ffmpeg
error_resilience.c
null pointer dereference
remote attack
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
8.3 High
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
79.4%
The ff_er_frame_end function in libavcodec/error_resilience.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.1 does not properly verify that a frame is fully initialized, which allows remote attackers to trigger a NULL pointer dereference via crafted picture data.
Affected configurations
Node
ffmpegffmpegRange≤1.0.3
ORffmpegffmpegMatch0.3
ORffmpegffmpegMatch0.3.1
ORffmpegffmpegMatch0.3.2
ORffmpegffmpegMatch0.3.3
ORffmpegffmpegMatch0.3.4
ORffmpegffmpegMatch0.4.0
ORffmpegffmpegMatch0.4.2
ORffmpegffmpegMatch0.4.3
ORffmpegffmpegMatch0.4.4
ORffmpegffmpegMatch0.4.5
ORffmpegffmpegMatch0.4.6
ORffmpegffmpegMatch0.4.7
ORffmpegffmpegMatch0.4.8
ORffmpegffmpegMatch0.4.9pre1
ORffmpegffmpegMatch0.5
ORffmpegffmpegMatch0.5.1
ORffmpegffmpegMatch0.5.2
ORffmpegffmpegMatch0.5.3
ORffmpegffmpegMatch0.5.4
ORffmpegffmpegMatch0.5.4.5
ORffmpegffmpegMatch0.5.4.6
ORffmpegffmpegMatch0.6
ORffmpegffmpegMatch0.6.1
ORffmpegffmpegMatch0.6.2
ORffmpegffmpegMatch0.6.3
ORffmpegffmpegMatch0.7
ORffmpegffmpegMatch0.7.1
ORffmpegffmpegMatch0.7.2
ORffmpegffmpegMatch0.7.3
ORffmpegffmpegMatch0.7.4
ORffmpegffmpegMatch0.7.5
ORffmpegffmpegMatch0.7.6
ORffmpegffmpegMatch0.7.7
ORffmpegffmpegMatch0.7.8
ORffmpegffmpegMatch0.7.9
ORffmpegffmpegMatch0.7.11
ORffmpegffmpegMatch0.7.12
ORffmpegffmpegMatch0.8.0
ORffmpegffmpegMatch0.8.1
ORffmpegffmpegMatch0.8.2
ORffmpegffmpegMatch0.8.5
ORffmpegffmpegMatch0.8.5.3
ORffmpegffmpegMatch0.8.5.4
ORffmpegffmpegMatch0.8.6
ORffmpegffmpegMatch0.8.7
ORffmpegffmpegMatch0.8.8
ORffmpegffmpegMatch0.8.10
ORffmpegffmpegMatch0.8.11
ORffmpegffmpegMatch0.9
ORffmpegffmpegMatch0.9.1
ORffmpegffmpegMatch0.10
ORffmpegffmpegMatch0.10.3
ORffmpegffmpegMatch0.10.4
ORffmpegffmpegMatch0.11
ORffmpegffmpegMatch1.0
ORffmpegffmpegMatch1.0.1
ORffmpegffmpegMatch1.0.2
ORffmpegffmpegMatch1.1
References
Related
prion
prion
Null pointer dereference
2013-11-23 18:55:00
ubuntucve
ubuntucve
CVE-2013-0860
2013-11-23 00:00:00
cvelist
cvelist
CVE-2013-0860
2013-11-23 18:00:00
nvd
nvd
CVE-2013-0860
2013-11-23 18:55:04
debiancve
debiancve
CVE-2013-0860
2013-11-23 18:55:04
nessus
nessus
RHEL 5 : qffmpeg (Unpatched Vulnerability)
2024-06-03 00:00:00
Mandriva Linux Security Advisory : ffmpeg (MDVSA-2014:227)
2014-11-26 00:00:00
GLSA-201502-08 : Libav: Multiple vulnerabilities
2015-02-09 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201502-08
2015-09-29 00:00:00
Debian: Security Advisory (DSA-3003-1)
2014-08-09 00:00:00
Debian Security Advisory DSA 3003-1 (libav - security update)
2014-08-10 00:00:00
osv
osv
libav - security update
2014-08-10 00:00:00
gentoo
gentoo
Libav: Multiple vulnerabilities
2015-02-07 00:00:00
FFmpeg: Multiple vulnerabilities
2016-03-12 00:00:00
debian
debian
[SECURITY] [DSA 3003-1] libav security update
2014-08-10 21:28:40
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
8.3 High
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
79.4%
Related for CVE-2013-0860