libavcodec/utils.c in FFmpeg before 2.4.2 omits a certain codec ID during enforcement of alignment, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted JV data.
References
Link | Resource |
---|---|
http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=105654e376a736d243aef4a1d121abebce912e6b | |
http://www.ffmpeg.org/security.html | Vendor Advisory |
http://www.ubuntu.com/usn/USN-2534-1 | Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2019/02/msg00005.html | Third Party Advisory |
https://security.gentoo.org/glsa/201603-06 | Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2014-11-05T11:00:00
Updated: 2019-02-07T10:57:02
Reserved: 2014-10-30T00:00:00
Link: CVE-2014-8542
JSON object: View
NVD Information
Status : Modified
Published: 2014-11-05T11:55:07.887
Modified: 2023-11-07T02:22:37.220
Link: CVE-2014-8542
JSON object: View
Redhat Information
No data.
CWE