Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2013-0860HistoryNov 23, 2013 - 6:55 p.m.
CVE-2013-0860
2013-11-2318:55:04
Debian Security Bug Tracker
security-tracker.debian.org
11
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.006 Low
EPSS
Percentile
79.4%
The ff_er_frame_end function in libavcodec/error_resilience.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.1 does not properly verify that a frame is fully initialized, which allows remote attackers to trigger a NULL pointer dereference via crafted picture data.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | ffmpeg | < 7:2.4.1-1 | ffmpeg_7:2.4.1-1_all.deb |
| Debian | 11 | all | ffmpeg | < 7:2.4.1-1 | ffmpeg_7:2.4.1-1_all.deb |
| Debian | 999 | all | ffmpeg | < 7:2.4.1-1 | ffmpeg_7:2.4.1-1_all.deb |
| Debian | 13 | all | ffmpeg | < 7:2.4.1-1 | ffmpeg_7:2.4.1-1_all.deb |
Related
nvd
nvd
CVE-2013-0860
2013-11-23 18:55:04
ubuntucve
ubuntucve
CVE-2013-0860
2013-11-23 00:00:00
cvelist
cvelist
CVE-2013-0860
2013-11-23 18:00:00
cve
cve
CVE-2013-0860
2013-11-23 18:55:04
prion
prion
Null pointer dereference
2013-11-23 18:55:00
nessus
nessus
RHEL 5 : qffmpeg (Unpatched Vulnerability)
2024-06-03 00:00:00
Mandriva Linux Security Advisory : ffmpeg (MDVSA-2014:227)
2014-11-26 00:00:00
GLSA-201502-08 : Libav: Multiple vulnerabilities
2015-02-09 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-3003-1)
2014-08-09 00:00:00
Debian Security Advisory DSA 3003-1 (libav - security update)
2014-08-10 00:00:00
Gentoo Security Advisory GLSA 201502-08
2015-09-29 00:00:00
debian
debian
[SECURITY] [DSA 3003-1] libav security update
2014-08-10 21:28:40
osv
osv
libav - security update
2014-08-10 00:00:00
gentoo
gentoo
Libav: Multiple vulnerabilities
2015-02-07 00:00:00
FFmpeg: Multiple vulnerabilities
2016-03-12 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.006 Low
EPSS
Percentile
79.4%
Related for DEBIANCVE:CVE-2013-0860