NetSight
critical9.3

CVE-2013-0859

The add_doubles_metadata function in libavcodec/tiff.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a negative or zero count …

Impact

The add_doubles_metadata function in libavcodec/tiff.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a negative or zero count value in a TIFF image, which triggers an out-of-bounds array access.

Affected products

VendorProductAffected versions
FfmpegFfmpeg
through 1.0
Versions 0.3, 0.3.1, 0.3.2, 0.3.3, 0.3.4

Weakness classification

References