CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
Percentile
73.1%
The msrle_decode_8_16_24_32 function in msrledec.c in libavcodec in FFmpeg
through 1.1.3 does not properly determine certain end pointers, which
allows remote attackers to cause a denial of service (out-of-bounds array
access and application crash) or possibly have unspecified other impact via
crafted Microsoft RLE data.
Author | Note |
---|---|
mdeslaur | ffmpeg-extra in multiverse needs to have matching version libav-extra is built with tarball produced by libav package ignoring releases near EoL. New version not available from upstream. |