Candidate: CVE-2013-7011 PublicDate: 2013-12-09 16:36:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7011 https://github.com/FFmpeg/FFmpeg/commit/547d690d676064069d44703a1917e0dab7e33445 https://trac.ffmpeg.org/ticket/2906 http://www.openwall.com/lists/oss-security/2013/12/08 Description: The read_header function in libavcodec/ffv1dec.c in FFmpeg before 2.1 does not prevent changes to global parameters, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted FFV1 data. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: Patches_ffmpeg: upstream_ffmpeg: needs-triage lucid_ffmpeg: ignored (reached end-of-life) precise_ffmpeg: DNE quantal_ffmpeg: DNE raring_ffmpeg: DNE saucy_ffmpeg: DNE devel_ffmpeg: DNE