Candidate: CVE-2013-0873 PublicDate: 2013-11-23 17:55:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0873 http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=4f1279154ee9baf2078241bf5619774970d18b25 Description: The read_header function in libavcodec/shorten.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid channel count, related to "freeing invalid addresses." Ubuntu-Description: Notes: mdeslaur> libav and ffmpeg codebases have diverged to the point of mdeslaur> not being able to track both using the same CVE numbers. mdeslaur> Marking this CVE as not-affected for libav. Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: Patches_ffmpeg: upstream_ffmpeg: needs-triage lucid_ffmpeg: ignored (reached end-of-life) precise_ffmpeg: DNE quantal_ffmpeg: DNE raring_ffmpeg: DNE saucy_ffmpeg: DNE devel_ffmpeg: DNE Patches_ffmpeg-extra: upstream_ffmpeg-extra: needs-triage lucid_ffmpeg-extra: ignored precise_ffmpeg-extra: DNE quantal_ffmpeg-extra: DNE raring_ffmpeg-extra: DNE saucy_ffmpeg-extra: DNE devel_ffmpeg-extra: DNE Patches_libav: upstream_libav: needs-triage lucid_libav: DNE precise_libav: not-affected quantal_libav: not-affected raring_libav: not-affected saucy_libav: not-affected devel_libav: not-affected Patches_libav-extra: upstream_libav-extra: needs-triage lucid_libav-extra: DNE precise_libav-extra: not-affected quantal_libav-extra: not-affected raring_libav-extra: not-affected saucy_libav-extra: not-affected devel_libav-extra: not-affected