6.8
CVSSv2

CVE-2013-7023

Published: 09/12/2013 Updated: 03/12/2016
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

The ff_combine_frame function in libavcodec/parser.c in FFmpeg prior to 2.1 does not properly handle certain memory-allocation errors, which allows remote malicious users to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted data.

Vulnerable Product Search on Vulmon Subscribe to Product

ffmpeg ffmpeg 0.10.3

ffmpeg ffmpeg 0.10.4

ffmpeg ffmpeg 0.4.0

ffmpeg ffmpeg 0.4.2

ffmpeg ffmpeg 0.5

ffmpeg ffmpeg 0.5.1

ffmpeg ffmpeg 0.6

ffmpeg ffmpeg 0.6.1

ffmpeg ffmpeg 0.7.2

ffmpeg ffmpeg 0.7.3

ffmpeg ffmpeg 0.8.1

ffmpeg ffmpeg 0.8.10

ffmpeg ffmpeg 0.8.7

ffmpeg ffmpeg 0.8.8

ffmpeg ffmpeg 1.1.4

ffmpeg ffmpeg 1.2

ffmpeg ffmpeg 0.3.1

ffmpeg ffmpeg 0.3.2

ffmpeg ffmpeg 0.4.5

ffmpeg ffmpeg 0.4.6

ffmpeg ffmpeg 0.5.4

ffmpeg ffmpeg 0.5.4.5

ffmpeg ffmpeg 0.7

ffmpeg ffmpeg 0.7.1

ffmpeg ffmpeg 0.7.6

ffmpeg ffmpeg 0.7.7

ffmpeg ffmpeg 0.7.8

ffmpeg ffmpeg 0.8.5

ffmpeg ffmpeg 0.8.5.3

ffmpeg ffmpeg 1.0

ffmpeg ffmpeg 1.1.1

ffmpeg ffmpeg 0.11

ffmpeg ffmpeg 0.3

ffmpeg ffmpeg 0.4.3

ffmpeg ffmpeg 0.4.4

ffmpeg ffmpeg 0.5.2

ffmpeg ffmpeg 0.5.3

ffmpeg ffmpeg 0.6.2

ffmpeg ffmpeg 0.6.3

ffmpeg ffmpeg 0.7.4

ffmpeg ffmpeg 0.7.5

ffmpeg ffmpeg 0.8.11

ffmpeg ffmpeg 0.8.2

ffmpeg ffmpeg 0.9

ffmpeg ffmpeg 0.9.1

ffmpeg ffmpeg 1.2.1

ffmpeg ffmpeg

ffmpeg ffmpeg 2.0

ffmpeg ffmpeg 0.10

ffmpeg ffmpeg 0.3.3

ffmpeg ffmpeg 0.3.4

ffmpeg ffmpeg 0.4.7

ffmpeg ffmpeg 0.4.8

ffmpeg ffmpeg 0.4.9

ffmpeg ffmpeg 0.5.4.6

ffmpeg ffmpeg 0.5.5

ffmpeg ffmpeg 0.7.11

ffmpeg ffmpeg 0.7.12

ffmpeg ffmpeg 0.7.9

ffmpeg ffmpeg 0.8.0

ffmpeg ffmpeg 0.8.5.4

ffmpeg ffmpeg 0.8.6

ffmpeg ffmpeg 1.1.2

ffmpeg ffmpeg 1.1.3

Vendor Advisories

The ff_combine_frame function in libavcodec/parserc in FFmpeg before 21 does not properly handle certain memory-allocation errors, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted data ...