6.8
CVSSv2

CVE-2015-3395

Published: 16/06/2015 Updated: 07/11/2023
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

The msrle_decode_pal4 function in msrledec.c in Libav prior to 10.7 and 11.x prior to 11.4 and FFmpeg prior to 2.0.7, 2.2.x prior to 2.2.15, 2.4.x prior to 2.4.8, 2.5.x prior to 2.5.6, and 2.6.x prior to 2.6.2 allows remote malicious users to have unspecified impact via a crafted image, related to a pixel pointer, which triggers an out-of-bounds array access.

Vulnerable Product Search on Vulmon Subscribe to Product

canonical ubuntu linux 12.04

ffmpeg ffmpeg 2.2.12

ffmpeg ffmpeg 2.2.8

ffmpeg ffmpeg 2.4.4

ffmpeg ffmpeg 2.5.0

ffmpeg ffmpeg 2.4.1

ffmpeg ffmpeg 2.2.4

ffmpeg ffmpeg 2.2.6

ffmpeg ffmpeg 2.2.3

ffmpeg ffmpeg 2.4.6

ffmpeg ffmpeg 2.6.0

ffmpeg ffmpeg 2.5.4

ffmpeg ffmpeg 2.2.1

ffmpeg ffmpeg 2.4.3

ffmpeg ffmpeg 2.2.14

ffmpeg ffmpeg 2.5.5

ffmpeg ffmpeg 2.4.7

ffmpeg ffmpeg 2.4.2

ffmpeg ffmpeg 2.4.5

ffmpeg ffmpeg 2.2.9

ffmpeg ffmpeg 2.2.11

ffmpeg ffmpeg 2.5.3

ffmpeg ffmpeg 2.2.10

ffmpeg ffmpeg 2.2.0

ffmpeg ffmpeg 2.2.13

ffmpeg ffmpeg 2.6.1

ffmpeg ffmpeg 2.0.6

ffmpeg ffmpeg 2.2.7

ffmpeg ffmpeg 2.5.1

ffmpeg ffmpeg 2.4.0

ffmpeg ffmpeg 2.2.5

ffmpeg ffmpeg 2.2.2

ffmpeg ffmpeg 2.5.2

libav libav

libav libav 11.1

libav libav 11.3

libav libav 11.0

libav libav 11.2

Vendor Advisories

Libav could be made to crash or run programs as your login if it opened a specially crafted file ...
Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library A full list of the changes is available at gitlibavorg/?p=libavgit;a=blob;f=Changelog;hb=refs/tags/v114 For the stable distribution (jessie), these problems have been fixed in version 6:114-1~deb8u1 For the testing distribut ...