Published: 22/01/2015 Updated: 07/11/2023

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 670

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Use-after-free vulnerability in the matroska_read_seek function in libavformat/matroskadec.c in FFmpeg prior to 2.5.1, as used in Google Chrome prior to 40.0.2214.91, allows remote malicious users to cause a denial of service or possibly have unspecified other impact via a crafted Matroska file that triggers improper maintenance of tracks data.

Vulnerable Product	Search on Vulmon	Subscribe to Product
google chrome
ffmpeg ffmpeg

Synopsis Important: chromium-browser security update Type/Severity Security Advisory: Important Topic Updated chromium-browser packages that fix multiple security issues are nowavailable for Red Hat Enterprise Linux 6 SupplementaryRed Hat Product Security has rated this update as having Important securityi ...

Several security issues were fixed in Oxide ...

Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library A full list of the changes is available at gitlibavorg/?p=libavgit;a=blob;f=Changelog;hb=refs/tags/v0817 For the stable distribution (wheezy), these problems have been fixed in version 6:0817-1 For the unstable distribution ...

Use-after-free vulnerability in the matroska_read_seek function in libavformat/matroskadecc in FFmpeg before 251, as used in Google Chrome before 400221491, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Matroska file that triggers improper maintenance of tracks data ...

NVD-CWE-Other http://secunia.com/advisories/62665 https://code.google.com/p/chromium/issues/detail?id=427266 http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=490a3ebf36821b81f73e34ad3f554cb523dd2682 http://googlechromereleases.blogspot.com/2015/01/stable-update.html http://secunia.com/advisories/62575 http://www.ubuntu.com/usn/USN-2476-1 http://www.securityfocus.com/bid/72288 http://security.gentoo.org/glsa/glsa-201502-13.xml http://www.securitytracker.com/id/1031623 http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html http://rhn.redhat.com/errata/RHSA-2015-0093.html http://secunia.com/advisories/62383 https://access.redhat.com/errata/RHSA-2015:0093 https://usn.ubuntu.com/2476-1/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2014-7933

CVE-2014-7933

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect