CVE-2018-14395 - libavformat/movenc.c in FFmpeg 3.2 and 4.0.2 allows attackers to cause a denial of service (application crash caused by a divide-by-zero error) with a user crafted audio file when converting to the MOV audio format

Back Back to CVE browser

MEDIUM

libavformat/movenc.c in FFmpeg 3.2 and 4.0.2 allows attackers to cause a denial of service (application crash caused by a divide-by-zero error) with a user crafted audio file when converting to the MOV audio format

Published Jul 19, 2018

6.5

MEDIUM

CVSS 3.1

EPSS 2.01%

Description

libavformat/movenc.c in FFmpeg 3.2 and 4.0.2 allows attackers to cause a denial of service (application crash caused by a divide-by-zero error) with a user crafted audio file when converting to the MOV audio format.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-369

References (5)

http://www.securitytracker.com/id/1041394
vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-6313
Advisory
https://github.com/FFmpeg/FFmpeg/commit/2c0e98a0b478284bdff6d7a4062522605a8beae5
x_refsource_MISCPatchThird Party Advisory
https://github.com/FFmpeg/FFmpeg/commit/fa19fbcf712a6a6cc5a5cfdc3254a97b9bce6582
x_refsource_MISCPatchThird Party Advisory
https://www.debian.org/security/2018/dsa-4258
vendor-advisoryx_refsource_DEBIANThird Party Advisory

Link	Providers	Tags
http://www.securitytracker.com/id/1041394		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-6313		Advisory
https://github.com/FFmpeg/FFmpeg/commit/2c0e98a0b478284bdff6d7a4062522605a8beae5		x_refsource_MISCPatchThird Party Advisory
https://github.com/FFmpeg/FFmpeg/commit/fa19fbcf712a6a6cc5a5cfdc3254a97b9bce6582		x_refsource_MISCPatchThird Party Advisory
https://www.debian.org/security/2018/dsa-4258		vendor-advisoryx_refsource_DEBIANThird Party Advisory