Lucene search
MitreCVE-2014-8541HistoryNov 05, 2014 - 11:55 a.m.
CVE-2014-8541
2014-11-0511:55:07
CWE-119
mitre
web.nvd.nist.gov
44
ffmpeg
cve-2014-8541
denial of service
vulnerability
nvd
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.9
Confidence
High
EPSS
0.006
Percentile
79.5%
libavcodec/mjpegdec.c in FFmpeg before 2.4.2 considers only dimension differences, and not bits-per-pixel differences, when determining whether an image size has changed, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted MJPEG data.
Affected configurations
Node
canonicalubuntu_linuxMatch12.04lts
Node
ffmpegffmpegRange≤2.4.1
ORffmpegffmpegMatch0.3
ORffmpegffmpegMatch0.3.1
ORffmpegffmpegMatch0.3.2
ORffmpegffmpegMatch0.3.3
ORffmpegffmpegMatch0.3.4
ORffmpegffmpegMatch0.4.0
ORffmpegffmpegMatch0.4.2
ORffmpegffmpegMatch0.4.3
ORffmpegffmpegMatch0.4.4
ORffmpegffmpegMatch0.4.5
ORffmpegffmpegMatch0.4.6
ORffmpegffmpegMatch0.4.7
ORffmpegffmpegMatch0.4.8
ORffmpegffmpegMatch0.4.9pre1
ORffmpegffmpegMatch0.5
ORffmpegffmpegMatch0.5.1
ORffmpegffmpegMatch0.5.2
ORffmpegffmpegMatch0.5.3
ORffmpegffmpegMatch0.5.4
ORffmpegffmpegMatch0.5.4.5
ORffmpegffmpegMatch0.5.4.6
ORffmpegffmpegMatch0.5.5
ORffmpegffmpegMatch0.6
ORffmpegffmpegMatch0.6.1
ORffmpegffmpegMatch0.6.2
ORffmpegffmpegMatch0.6.3
ORffmpegffmpegMatch0.7
ORffmpegffmpegMatch0.7.1
ORffmpegffmpegMatch0.7.2
ORffmpegffmpegMatch0.7.3
ORffmpegffmpegMatch0.7.4
ORffmpegffmpegMatch0.7.5
ORffmpegffmpegMatch0.7.6
ORffmpegffmpegMatch0.7.7
ORffmpegffmpegMatch0.7.8
ORffmpegffmpegMatch0.7.9
ORffmpegffmpegMatch0.7.11
ORffmpegffmpegMatch0.7.12
ORffmpegffmpegMatch0.8.0
ORffmpegffmpegMatch0.8.1
ORffmpegffmpegMatch0.8.2
ORffmpegffmpegMatch0.8.5
ORffmpegffmpegMatch0.8.5.3
ORffmpegffmpegMatch0.8.5.4
ORffmpegffmpegMatch0.8.6
ORffmpegffmpegMatch0.8.7
ORffmpegffmpegMatch0.8.8
ORffmpegffmpegMatch0.8.10
ORffmpegffmpegMatch0.8.11
ORffmpegffmpegMatch0.9
ORffmpegffmpegMatch0.9.1
ORffmpegffmpegMatch0.10
ORffmpegffmpegMatch0.10.3
ORffmpegffmpegMatch0.10.4
ORffmpegffmpegMatch0.11
ORffmpegffmpegMatch0.11.1
ORffmpegffmpegMatch0.11.2
ORffmpegffmpegMatch0.11.3
ORffmpegffmpegMatch0.11.4
ORffmpegffmpegMatch1.0
ORffmpegffmpegMatch1.0.1
ORffmpegffmpegMatch1.0.2
ORffmpegffmpegMatch1.0.3
ORffmpegffmpegMatch1.0.4
ORffmpegffmpegMatch1.1
ORffmpegffmpegMatch1.1.1
ORffmpegffmpegMatch1.1.2
ORffmpegffmpegMatch1.1.3
ORffmpegffmpegMatch1.1.4
ORffmpegffmpegMatch1.1.5
ORffmpegffmpegMatch1.1.6
ORffmpegffmpegMatch1.1.7
ORffmpegffmpegMatch1.1.8
ORffmpegffmpegMatch1.1.9
ORffmpegffmpegMatch1.1.10
ORffmpegffmpegMatch1.1.11
ORffmpegffmpegMatch1.1.12
ORffmpegffmpegMatch1.1.13
ORffmpegffmpegMatch1.2
ORffmpegffmpegMatch1.2.1
ORffmpegffmpegMatch1.2.3
ORffmpegffmpegMatch1.2.4
ORffmpegffmpegMatch1.2.5
ORffmpegffmpegMatch1.2.6
ORffmpegffmpegMatch1.2.7
ORffmpegffmpegMatch2.0
ORffmpegffmpegMatch2.0.1
ORffmpegffmpegMatch2.0.2
ORffmpegffmpegMatch2.0.3
ORffmpegffmpegMatch2.0.4
ORffmpegffmpegMatch2.0.5
ORffmpegffmpegMatch2.1
ORffmpegffmpegMatch2.1.1
ORffmpegffmpegMatch2.1.2
ORffmpegffmpegMatch2.1.3
ORffmpegffmpegMatch2.1.4
ORffmpegffmpegMatch2.1.5
ORffmpegffmpegMatch2.2
ORffmpegffmpegMatch2.2.4
ORffmpegffmpegMatch2.3
ORffmpegffmpegMatch2.3.2
ORffmpegffmpegMatch2.3.3
ORffmpegffmpegMatch2.3.4
ORffmpegffmpegMatch2.4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| canonical | ubuntu_linux | 12.04 | cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:* |
| ffmpeg | ffmpeg | * | cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:* |
| ffmpeg | ffmpeg | 0.3 | cpe:2.3:a:ffmpeg:ffmpeg:0.3:*:*:*:*:*:*:* |
| ffmpeg | ffmpeg | 0.3.1 | cpe:2.3:a:ffmpeg:ffmpeg:0.3.1:*:*:*:*:*:*:* |
| ffmpeg | ffmpeg | 0.3.2 | cpe:2.3:a:ffmpeg:ffmpeg:0.3.2:*:*:*:*:*:*:* |
| ffmpeg | ffmpeg | 0.3.3 | cpe:2.3:a:ffmpeg:ffmpeg:0.3.3:*:*:*:*:*:*:* |
| ffmpeg | ffmpeg | 0.3.4 | cpe:2.3:a:ffmpeg:ffmpeg:0.3.4:*:*:*:*:*:*:* |
| ffmpeg | ffmpeg | 0.4.0 | cpe:2.3:a:ffmpeg:ffmpeg:0.4.0:*:*:*:*:*:*:* |
| ffmpeg | ffmpeg | 0.4.2 | cpe:2.3:a:ffmpeg:ffmpeg:0.4.2:*:*:*:*:*:*:* |
| ffmpeg | ffmpeg | 0.4.3 | cpe:2.3:a:ffmpeg:ffmpeg:0.4.3:*:*:*:*:*:*:* |
Related
ubuntucve
ubuntucve
CVE-2014-8541
2014-11-05 00:00:00
veracode
veracode
Denial Of Service (DoS)
2017-02-06 01:51:16
prion
prion
Out-of-bounds
2014-11-05 11:55:00
debiancve
debiancve
CVE-2014-8541
2014-11-05 11:55:07
cvelist
cvelist
CVE-2014-8541
2014-11-05 11:00:00
nvd
nvd
CVE-2014-8541
2014-11-05 11:55:07
mageia
mageia
Updated ffmpeg packages fix security vulnerabilities
2014-11-21 15:44:16
Updated avidemux packages fix security vulnerabilities
2014-11-26 20:29:06
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0464)
2022-01-28 00:00:00
Mageia: Security Advisory (MGASA-2014-0491)
2022-01-28 00:00:00
Ubuntu: Security Advisory (USN-2944-1)
2016-04-05 00:00:00
freebsd
freebsd
ffmpeg -- multiple vulnerabilities
2015-03-12 00:00:00
nessus
nessus
FreeBSD : ffmpeg -- multiple vulnerabilities (65b14d39-d01f-419c-b0b8-5df60b929973)
2015-06-02 00:00:00
Ubuntu 12.04 LTS : libav vulnerabilities (USN-2944-1)
2016-04-05 00:00:00
Mandriva Linux Security Advisory : ffmpeg (MDVSA-2015:173)
2015-03-31 00:00:00
ubuntu
ubuntu
Libav vulnerabilities
2016-04-04 00:00:00
gentoo
gentoo
FFmpeg: Multiple vulnerabilities
2016-03-12 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.9
Confidence
High
EPSS
0.006
Percentile
79.5%
Related for CVE-2014-8541