Lucene search
HistoryMar 01, 2014 - 12:55 a.m.
CVE-2014-2263
cve-2014-2263
mpeg2
dvb
ffmpeg
out-of-bounds write
security vulnerability
nvd
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.7 High
AI Score
Confidence
High
0.007 Low
EPSS
Percentile
80.8%
The mpegts_write_pmt function in the MPEG2 transport stream (aka DVB) muxer (libavformat/mpegtsenc.c) in FFmpeg, possibly 2.1 and earlier, allows remote attackers to have unspecified impact and vectors, which trigger an out-of-bounds write.
Affected configurations
Node
ffmpegffmpegRange≤2.1
ORffmpegffmpegMatch2.0
ORffmpegffmpegMatch2.0.1
ORffmpegffmpegMatch2.0.2
ORffmpegffmpegMatch2.0.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| ffmpeg:ffmpeg | ffmpeg | le | 2.1 |
| ffmpeg:ffmpeg | ffmpeg | eq | 2.0 |
| ffmpeg:ffmpeg | ffmpeg | eq | 2.0.1 |
| ffmpeg:ffmpeg | ffmpeg | eq | 2.0.2 |
| ffmpeg:ffmpeg | ffmpeg | eq | 2.0.3 |
Related
debiancve
debiancve
CVE-2014-2263
2014-03-01 00:55:05
prion
prion
Out-of-bounds
2014-03-01 00:55:00
cvelist
cvelist
CVE-2014-2263
2014-02-28 18:00:00
ubuntucve
ubuntucve
CVE-2014-2263
2014-03-01 00:00:00
nvd
nvd
CVE-2014-2263
2014-03-01 00:55:05
mageia
mageia
Updated ffmpeg packages fix security vulnerabilities
2014-07-04 22:14:30
Updated ffmpeg packages fix security vulnerabilities
2014-07-04 22:22:12
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0280)
2022-01-28 00:00:00
Mageia: Security Advisory (MGASA-2014-0281)
2022-01-28 00:00:00
Debian: Security Advisory (DSA-3003-1)
2014-08-09 00:00:00
securityvulns
securityvulns
ffmpeg / libav multiple security vulnerabilities
2014-07-14 00:00:00
[ MDVSA-2014:129 ] ffmpeg
2014-07-14 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : ffmpeg (MDVSA-2014:129)
2014-07-10 00:00:00
Debian DSA-3003-1 : libav - security update
2014-08-12 00:00:00
Mandriva Linux Security Advisory : ffmpeg (MDVSA-2015:173)
2015-03-31 00:00:00
debian
debian
[SECURITY] [DSA 3003-1] libav security update
2014-08-10 21:28:40
osv
osv
libav - security update
2014-08-10 00:00:00
gentoo
gentoo
FFmpeg: Multiple vulnerabilities
2016-03-12 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.7 High
AI Score
Confidence
High
0.007 Low
EPSS
Percentile
80.8%
Related for CVE-2014-2263