HIGH
The aac_decode_init function in libavcodec/aacdec.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attackers to have an unspecified impact via a large number of channels in an AAC file, which triggers an out-of-bounds array access
Published Nov 23, 2013
9.3
HIGHCVSS 2.0
EPSS 3.62%
Description
The aac_decode_init function in libavcodec/aacdec.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attackers to have an unspecified impact via a large number of channels in an AAC file, which triggers an out-of-bounds array access.
Affected products
No data.
OR
- ≤ 1.0.2
- 0.3
- 0.3.1
- 0.3.2
- 0.3.3
- 0.3.4
- 0.4.0
- 0.4.2
- 0.4.3
- 0.4.4
- 0.4.5
- 0.4.6
- 0.4.7
- 0.4.8
- 0.4.9
- 0.5
- 0.5.1
- 0.5.2
- 0.5.3
- 0.5.4
- 0.5.4.5
- 0.5.4.6
- 0.6
- 0.6.1
- 0.6.2
- 0.6.3
- 0.7
- 0.7.1
- 0.7.2
- 0.7.3
- 0.7.4
- 0.7.5
- 0.7.6
- 0.7.7
- 0.7.8
- 0.7.9
- 0.7.11
- 0.7.12
- 0.8.0
- 0.8.1
- 0.8.2
- 0.8.5
- 0.8.5.3
- 0.8.5.4
- 0.8.6
- 0.8.7
- 0.8.8
- 0.8.10
- 0.8.11
- 0.9
- 0.9.1
- 0.10
- 0.10.3
- 0.10.4
- 0.11
- 1.0
- 1.0.1
- 1.1
- 1.1.1
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (5)
- http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=47e462eecc0a47ad40f59376199f93f227e21d13 x_refsource_CONFIRM
- http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=c459c7b23efffab762560e41ad6a2c0dbbfd4915 x_refsource_CONFIRM
- http://www.debian.org/security/2013/dsa-2793 vendor-advisoryx_refsource_DEBIAN
- http://www.ffmpeg.org/security.html x_refsource_CONFIRM
- https://security.gentoo.org/glsa/201603-06 vendor-advisoryx_refsource_GENTOO
| Link | Providers | Tags |
|---|---|---|
| http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=47e462eecc0a47ad40f59376199f93f227e21d13 | x_refsource_CONFIRM | |
| http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=c459c7b23efffab762560e41ad6a2c0dbbfd4915 | x_refsource_CONFIRM | |
| http://www.debian.org/security/2013/dsa-2793 | vendor-advisoryx_refsource_DEBIAN | |
| http://www.ffmpeg.org/security.html | x_refsource_CONFIRM | |
| https://security.gentoo.org/glsa/201603-06 | vendor-advisoryx_refsource_GENTOO |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner Chrome
Published Nov 23, 2013
Updated Aug 6, 2024
Reserved Jan 7, 2013
Link CVE-2013-0866
CISA Vulnrichment
Updated n/a