medium6.8
CVE-2015-3395
The msrle_decode_pal4 function in msrledec.c in Libav before 10.7 and 11.x before 11.4 and FFmpeg before 2.0.7, 2.2.x before 2.2.15, 2.4.x before 2.4.8, 2.5.x …
Impact
The msrle_decode_pal4 function in msrledec.c in Libav before 10.7 and 11.x before 11.4 and FFmpeg before 2.0.7, 2.2.x before 2.2.15, 2.4.x before 2.4.8, 2.5.x before 2.5.6, and 2.6.x before 2.6.2 allows remote attackers to have unspecified impact via a crafted image, related to a pixel pointer, which triggers an out-of-bounds array access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Canonical | Ubuntu Linux | Version 12.04 |
| Ffmpeg | Ffmpeg | Versions 2.0.6, 2.2.0, 2.2.1, 2.2.2, 2.2.3, 2.2.4 |
| Libav | Libav | through 10.6 Versions 11.0, 11.1, 11.2, 11.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=f7e1367f58263593e6cee3c282f7277d7ee9d553
- http://www.debian.org/security/2015/dsa-3288
- http://www.securityfocus.com/bid/74433
- http://www.ubuntu.com/usn/USN-2944-1
- https://git.libav.org/?p=libav.git%3Ba=blob%3Bf=Changelog%3Bhb=refs/tags/v11.4
- https://security.gentoo.org/glsa/201603-06
- https://security.gentoo.org/glsa/201705-08
- https://www.ffmpeg.org/security.html
- http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=f7e1367f58263593e6cee3c282f7277d7ee9d553
- http://www.debian.org/security/2015/dsa-3288
- http://www.securityfocus.com/bid/74433
- http://www.ubuntu.com/usn/USN-2944-1
- https://git.libav.org/?p=libav.git%3Ba=blob%3Bf=Changelog%3Bhb=refs/tags/v11.4
- https://security.gentoo.org/glsa/201603-06
- https://security.gentoo.org/glsa/201705-08
- https://www.ffmpeg.org/security.html