Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2015-8219

Опубликовано: 17 нояб. 2015
Источник: ubuntu
Приоритет: medium
CVSS2: 7.5

Описание

The init_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.2 does not enforce minimum-value and maximum-value constraints on tile coordinates, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG 2000 data.

РелизСтатусПримечание
artful

not-affected

7:2.8.3-1
bionic

not-affected

7:2.8.3-1
devel

not-affected

7:2.8.3-1
esm-apps/bionic

not-affected

7:2.8.3-1
esm-apps/xenial

not-affected

7:2.8.3-1
esm-infra-legacy/trusty

DNE

precise

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

DNE

devel

DNE

esm-infra-legacy/trusty

not-affected

code not present
precise

not-affected

code not present
precise/esm

DNE

precise was not-affected [code not present]
trusty

not-affected

code not present
trusty/esm

not-affected

code not present
upstream

needs-triage

vivid

ignored

end of life

Показывать по

Ссылки на источники

7.5 High

CVSS2

Связанные уязвимости

nvd
около 10 лет назад

The init_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.2 does not enforce minimum-value and maximum-value constraints on tile coordinates, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG 2000 data.

debian
около 10 лет назад

The init_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2. ...

github
больше 3 лет назад

The init_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.2 does not enforce minimum-value and maximum-value constraints on tile coordinates, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG 2000 data.

fstec
около 10 лет назад

Уязвимость мультимедийной библиотеки FFmpeg, позволяющая нарушителю вызвать отказ в обслуживании

suse-cvrf
около 10 лет назад

Security update for ffmpeg

7.5 High

CVSS2