NetSight
medium6.8

CVE-2014-2098

libavcodec/wmalosslessdec.c in FFmpeg before 2.1.4 uses an incorrect data-structure size for certain coefficients, which allows remote attackers to cause a den…

Impact

libavcodec/wmalosslessdec.c in FFmpeg before 2.1.4 uses an incorrect data-structure size for certain coefficients, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted WMA data.

Affected products

VendorProductAffected versions
FfmpegFfmpeg
through 2.1.3
Versions 2.0, 2.0.1, 2.0.2, 2.0.3, 2.1

Weakness classification

References