Candidate: CVE-2013-0858 PublicDate: 2013-12-07 21:55:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0858 http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=13451f5520ce6b0afde861b2285dda659f8d4fb4 Description: The atrac3_decode_init function in libavcodec/atrac3.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via ATRAC3 data with the joint stereo coding mode set and fewer than two channels. Ubuntu-Description: Notes: mdeslaur> libav and ffmpeg codebases have diverged to the point of mdeslaur> not being able to track both using the same CVE numbers. mdeslaur> Marking this CVE as not-affected for libav. Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: Patches_ffmpeg: upstream_ffmpeg: needs-triage lucid_ffmpeg: ignored (reached end-of-life) precise_ffmpeg: DNE quantal_ffmpeg: DNE raring_ffmpeg: DNE saucy_ffmpeg: DNE devel_ffmpeg: DNE Patches_ffmpeg-extra: upstream_ffmpeg-extra: needs-triage lucid_ffmpeg-extra: ignored precise_ffmpeg-extra: DNE quantal_ffmpeg-extra: DNE raring_ffmpeg-extra: DNE saucy_ffmpeg-extra: DNE devel_ffmpeg-extra: DNE Patches_libav: upstream_libav: needs-triage lucid_libav: DNE precise_libav: not-affected quantal_libav: not-affected raring_libav: not-affected saucy_libav: not-affected devel_libav: not-affected Patches_libav-extra: upstream_libav-extra: needs-triage lucid_libav-extra: DNE precise_libav-extra: not-affected quantal_libav-extra: not-affected raring_libav-extra: not-affected saucy_libav-extra: not-affected devel_libav-extra: not-affected