critical9.3
CVE-2013-0858
The atrac3_decode_init function in libavcodec/atrac3.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via ATRAC3 data with the jo…
Impact
The atrac3_decode_init function in libavcodec/atrac3.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via ATRAC3 data with the joint stereo coding mode set and fewer than two channels.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Debian | Debian Linux | Version 7.0 |
| Ffmpeg | Ffmpeg | through 1.0.3 Versions 0.3, 0.3.1, 0.3.2, 0.3.3, 0.3.4 |
References
- NVD record
- CVE.org record
- http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=13451f5520ce6b0afde861b2285dda659f8d4fb4
- http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=2502914c5f8eb77659d7c0868396862557a63245
- http://www.debian.org/security/2013/dsa-2793
- http://www.ffmpeg.org/security.html
- http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=13451f5520ce6b0afde861b2285dda659f8d4fb4
- http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=2502914c5f8eb77659d7c0868396862557a63245
- http://www.debian.org/security/2013/dsa-2793
- http://www.ffmpeg.org/security.html