NVD

Id
36250  
Name
CVE-2014-9604  
Description
libavcodec/utvideodec.c in FFmpeg before 2.5.2 does not check for a zero value of a slice height, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Ut Video data, related to the (1) restore_median and (2) restore_median_il functions.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-01-16  
Modified Date
2016-12-02  
Seq
2014-9604  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
185195 36250 CVE-2014-9604 http://git.videolan.org/?p=ffmpeg.git;a=commit;h=3881606240953b9275a247a1c98a567f3c44890f  View
185196 36250 CVE-2014-9604 USN-2534-1  View
185197 36250 CVE-2014-9604 GLSA-201603-06  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18849 JVNDB-2014-007724 FFmpeg の libavcodec/utvideodec.c におけるサービス運用妨害 (DoS) の脆弱性 FFmpeg の libavcodec/utvideodec.c は、スライスの高さのゼロの値をチェックしないため、サービス運用妨害 (配列の領域外へのアクセス) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2014-9604 76897 CVE-2014-9604 36250 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007724.html 2014-12-17 2015-01-23 View