Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.3
CVSSv2

CVE-2015-5479

Published: 19/04/2016 Updated: 07/11/2023
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Subscribe to Ubuntu

Vulnerability Summary

The ff_h263_decode_mba function in libavcodec/ituh263dec.c in Libav prior to 11.5 allows remote malicious users to cause a denial of service (divide-by-zero error and application crash) via a file with crafted dimensions.

Vulnerable Product Search on Vulmon Subscribe to Product

ubuntu ubuntu 12.04

libav libav

opensuse leap 42.1

Vendor Advisories

Ubuntu Security Notice: libav vulnerabilities
Libav could be made to crash or run programs as your login if it opened a specially crafted file ...

References

CWE-189https://blogs.gentoo.org/ago/2015/07/16/libav-divide-by-zero-in-ff_h263_decode_mba/http://www.ubuntu.com/usn/USN-2944-1https://libav.org/releases/libav-11.5.changeloghttp://lists.opensuse.org/opensuse-updates/2016-06/msg00105.htmlhttp://www.securityfocus.com/bid/75932https://git.libav.org/?p=libav.git%3Ba=commitdiff%3Bh=0a49a62f998747cfa564d98d36a459fe70d3299bhttps://nvd.nist.govhttps://usn.ubuntu.com/2944-1/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3400CVE-2023-7252CVE-2024-21111denial of serviceCVE-2024-29661CVE-2024-22856remote attackersencryptionCVE-2023-38299
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook