CVE-2013-7020
EPSS 1.5%libav - security update
發布日:2013/12/9修改日:2026/4/28
也稱為:DEBIAN-CVE-2013-7020
描述
The read_header function in libavcodec/ffv1dec.c in FFmpeg before 2.1 does not properly enforce certain bit-count and colorspace constraints, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted FFV1 data.
受影響套件(2)
- Debian/ffmpegfrom 0, < 7:2.4.1-1
- Debian/libavfrom 0, < 6:0.8.16-1