Out-of-bounds

2013-12-2420:55:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

79.8%

JSON

The mov_text_decode_frame function in libavcodec/movtextdec.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via crafted 3GPP TS 26.245 data.

CPENameOperatorVersion
ffmpegeq1.0
ffmpegle1.0.1

CPE	Name	Operator	Version
	ffmpeg	eq	1.0
	ffmpeg	le	1.0.1

References

git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=68e48ed72e0597ae61bc3e9e6e6d9edcb1a00073

secunia.com/advisories/51964

www.ffmpeg.org/security.html

www.osvdb.org/93242

trac.ffmpeg.org/ticket/2087