CVE-2013-2496 - The msrle_decode_8_16_24_32 function in msrledec.c in libavcodec in FFmpeg through 1.1.3 does not properly determine certain end pointers, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted Microsoft RLE data

Back Back to CVE browser

HIGH

The msrle_decode_8_16_24_32 function in msrledec.c in libavcodec in FFmpeg through 1.1.3 does not properly determine certain end pointers, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted Microsoft RLE data

Published Mar 9, 2013

7.5

HIGH

CVSS 2.0

EPSS 1.37%

Description

The msrle_decode_8_16_24_32 function in msrledec.c in libavcodec in FFmpeg through 1.1.3 does not properly determine certain end pointers, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted Microsoft RLE data.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (3)

http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=e398990eb87785e20e065cd3f14d1dbb69df4392
x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-1790-1
vendor-advisoryx_refsource_UBUNTU
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-2442
Advisory

Link	Providers	Tags
http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=e398990eb87785e20e065cd3f14d1dbb69df4392		x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-1790-1		vendor-advisoryx_refsource_UBUNTU
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-2442		Advisory