Candidate: CVE-2013-0850 PublicDate: 2013-12-07 21:55:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0850 http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=d6c184880ee2e09fd68c0ae217173832cee5afc1 Description: The decode_slice_header function in libavcodec/h264.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted H.264 data, which triggers an out-of-bounds array access. Ubuntu-Description: Notes: mdeslaur> libav and ffmpeg codebases have diverged to the point of mdeslaur> not being able to track both using the same CVE numbers. mdeslaur> Marking this CVE as not-affected for libav. Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: Patches_ffmpeg: upstream_ffmpeg: needs-triage lucid_ffmpeg: ignored (reached end-of-life) precise_ffmpeg: DNE quantal_ffmpeg: DNE raring_ffmpeg: DNE saucy_ffmpeg: DNE devel_ffmpeg: DNE Patches_ffmpeg-extra: upstream_ffmpeg-extra: needs-triage lucid_ffmpeg-extra: ignored precise_ffmpeg-extra: DNE quantal_ffmpeg-extra: DNE raring_ffmpeg-extra: DNE saucy_ffmpeg-extra: DNE devel_ffmpeg-extra: DNE Patches_libav: upstream_libav: needs-triage lucid_libav: DNE precise_libav: not-affected quantal_libav: not-affected raring_libav: not-affected saucy_libav: not-affected devel_libav: not-affected Patches_libav-extra: upstream_libav-extra: needs-triage lucid_libav-extra: DNE precise_libav-extra: not-affected quantal_libav-extra: not-affected raring_libav-extra: not-affected saucy_libav-extra: not-affected devel_libav-extra: not-affected