7.5
CVSSv2

CVE-2014-8547

Published: 05/11/2014 Updated: 07/11/2023
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

libavcodec/gifdec.c in FFmpeg prior to 2.4.2 does not properly compute image heights, which allows remote malicious users to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted GIF data.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

canonical ubuntu linux 12.04

ffmpeg ffmpeg 0.7.7

ffmpeg ffmpeg 0.7.1

ffmpeg ffmpeg 1.2.5

ffmpeg ffmpeg 2.3

ffmpeg ffmpeg 0.11.4

ffmpeg ffmpeg 0.7.6

ffmpeg ffmpeg 0.4.5

ffmpeg ffmpeg 0.10.3

ffmpeg ffmpeg 2.3.3

ffmpeg ffmpeg 0.3.2

ffmpeg ffmpeg 2.2

ffmpeg ffmpeg 0.11.2

ffmpeg ffmpeg 0.8.6

ffmpeg ffmpeg 0.4.7

ffmpeg ffmpeg 0.6.1

ffmpeg ffmpeg 1.1.10

ffmpeg ffmpeg 2.0.4

ffmpeg ffmpeg 2.2.4

ffmpeg ffmpeg 0.3.3

ffmpeg ffmpeg 0.7.5

ffmpeg ffmpeg 1.1.2

ffmpeg ffmpeg 1.2.6

ffmpeg ffmpeg 0.5.4.6

ffmpeg ffmpeg 1.1.6

ffmpeg ffmpeg 0.3

ffmpeg ffmpeg 0.4.2

ffmpeg ffmpeg 1.0

ffmpeg ffmpeg 0.11.3

ffmpeg ffmpeg 1.2

ffmpeg ffmpeg 1.1.1

ffmpeg ffmpeg 0.5

ffmpeg ffmpeg 1.1.11

ffmpeg ffmpeg 0.5.4

ffmpeg ffmpeg 0.9.1

ffmpeg ffmpeg 0.8.5.4

ffmpeg ffmpeg 1.1.4

ffmpeg ffmpeg 2.0

ffmpeg ffmpeg 2.0.3

ffmpeg ffmpeg 0.8.5.3

ffmpeg ffmpeg 1.2.1

ffmpeg ffmpeg 0.5.1

ffmpeg ffmpeg 1.1.8

ffmpeg ffmpeg 1.2.3

ffmpeg ffmpeg 0.8.5

ffmpeg ffmpeg 1.2.4

ffmpeg ffmpeg 2.1.3

ffmpeg ffmpeg 0.9

ffmpeg ffmpeg 0.3.1

ffmpeg ffmpeg 1.1.5

ffmpeg ffmpeg 0.7.3

ffmpeg ffmpeg 2.0.2

ffmpeg ffmpeg 0.4.9

ffmpeg ffmpeg 2.3.2

ffmpeg ffmpeg 0.7.4

ffmpeg ffmpeg 0.8.0

ffmpeg ffmpeg 1.0.3

ffmpeg ffmpeg 1.1.9

ffmpeg ffmpeg 1.1.3

ffmpeg ffmpeg 0.5.5

ffmpeg ffmpeg 0.6

ffmpeg ffmpeg 0.5.3

ffmpeg ffmpeg 0.8.10

ffmpeg ffmpeg 0.4.4

ffmpeg ffmpeg 0.5.2

ffmpeg ffmpeg 2.1.5

ffmpeg ffmpeg 0.4.6

ffmpeg ffmpeg 2.0.1

ffmpeg ffmpeg 1.1.12

ffmpeg ffmpeg 2.1.1

ffmpeg ffmpeg 2.1.4

ffmpeg ffmpeg 0.3.4

ffmpeg ffmpeg 0.7.8

ffmpeg ffmpeg 1.0.4

ffmpeg ffmpeg 0.4.0

ffmpeg ffmpeg 0.6.2

ffmpeg ffmpeg 0.8.7

ffmpeg ffmpeg 1.0.1

ffmpeg ffmpeg 0.10.4

ffmpeg ffmpeg 0.7.9

ffmpeg ffmpeg 0.5.4.5

ffmpeg ffmpeg 0.11.1

ffmpeg ffmpeg 0.11

ffmpeg ffmpeg 2.3.4

ffmpeg ffmpeg

ffmpeg ffmpeg 0.7

ffmpeg ffmpeg 2.1

ffmpeg ffmpeg 1.1.13

ffmpeg ffmpeg 1.1

ffmpeg ffmpeg 0.7.12

ffmpeg ffmpeg 0.8.1

ffmpeg ffmpeg 0.4.8

ffmpeg ffmpeg 2.4

ffmpeg ffmpeg 0.4.3

ffmpeg ffmpeg 0.6.3

ffmpeg ffmpeg 0.8.11

ffmpeg ffmpeg 0.10

ffmpeg ffmpeg 0.8.8

ffmpeg ffmpeg 0.8.2

ffmpeg ffmpeg 0.7.11

ffmpeg ffmpeg 1.2.7

ffmpeg ffmpeg 0.7.2

ffmpeg ffmpeg 1.1.7

ffmpeg ffmpeg 1.0.2

ffmpeg ffmpeg 2.1.2

ffmpeg ffmpeg 2.0.5

Vendor Advisories

Libav could be made to crash or run programs as your login if it opened a specially crafted file ...
Debian Bug report logs - #773626 libav: multiple security issues Package: src:libav; Maintainer for src:libav is Debian Multimedia Maintainers <pkg-multimedia-maintainers@listsaliothdebianorg>; Reported by: Michael Gilbert <mgilbert@debianorg> Date: Sun, 21 Dec 2014 04:33:01 UTC Severity: serious Tags: fixed-upst ...
Debian Bug report logs - #775593 libav: CVE-2014-{8544,8546,9316,9318,9319} Package: src:libav; Maintainer for src:libav is Debian Multimedia Maintainers <pkg-multimedia-maintainers@listsaliothdebianorg>; Reported by: Michael Gilbert <mgilbert@debianorg> Date: Sun, 21 Dec 2014 04:33:01 UTC Severity: important Tag ...
Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library A full list of the changes is available at gitlibavorg/?p=libavgit;a=blob;f=Changelog;hb=refs/tags/v0817 For the stable distribution (wheezy), these problems have been fixed in version 6:0817-1 For the unstable distribution ...