CVE-2013-7014

2013-12-0916:36:48

Debian Security Bug Tracker

security-tracker.debian.org

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.023 Low

EPSS

Percentile

89.9%

JSON

Integer signedness error in the add_bytes_l2_c function in libavcodec/pngdsp.c in FFmpeg before 2.1 allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted PNG data.

OSVersionArchitecturePackageVersionFilename
Debian12allffmpeg< 7:5.1.5-0+deb12u1ffmpeg_7:5.1.5-0+deb12u1_all.deb
Debian11allffmpeg< 7:4.3.6-0+deb11u1ffmpeg_7:4.3.6-0+deb11u1_all.deb
Debian999allffmpeg< 7:6.1.1-4ffmpeg_7:6.1.1-4_all.deb
Debian13allffmpeg< 7:6.1.1-4ffmpeg_7:6.1.1-4_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	ffmpeg	< 7:5.1.5-0+deb12u1	ffmpeg_7:5.1.5-0+deb12u1_all.deb
Debian	11	all	ffmpeg	< 7:4.3.6-0+deb11u1	ffmpeg_7:4.3.6-0+deb11u1_all.deb
Debian	999	all	ffmpeg	< 7:6.1.1-4	ffmpeg_7:6.1.1-4_all.deb
Debian	13	all	ffmpeg	< 7:6.1.1-4	ffmpeg_7:6.1.1-4_all.deb