Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2015-3417

Опубликовано: 24 апр. 2015
Источник: nvd
CVSS2: 6.8
EPSS Низкий

Описание

Use-after-free vulnerability in the ff_h264_free_tables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted H.264 data in an MP4 file, as demonstrated by an HTML VIDEO element that references H.264 data.

Комментарий

CWE-416: Use After Free

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*
Версия до 2.3.5 (включая)
Конфигурация 2
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 77%
0.01017
Низкий

6.8 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

ubuntu
почти 11 лет назад

Use-after-free vulnerability in the ff_h264_free_tables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted H.264 data in an MP4 file, as demonstrated by an HTML VIDEO element that references H.264 data.

debian
почти 11 лет назад

Use-after-free vulnerability in the ff_h264_free_tables function in li ...

github
больше 3 лет назад

Use-after-free vulnerability in the ff_h264_free_tables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted H.264 data in an MP4 file, as demonstrated by an HTML VIDEO element that references H.264 data.

EPSS

Процентиль: 77%
0.01017
Низкий

6.8 Medium

CVSS2

Дефекты

NVD-CWE-Other