CVE-2014-9602

EPSS 0.46%

發布日:2015/1/16修改日:2026/4/28

也稱為:DEBIAN-CVE-2014-9602

描述

libavcodec/xface.h in FFmpeg before 2.5.2 establishes certain digits and words array dimensions that do not satisfy a required mathematical relationship, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted X-Face image data.

受影響套件(1)

Debian/ffmpegfrom 0, < 7:2.5.1-1

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2014-9602