CVE-2013-7008

Published: 9 December 2013

The decode_slice_header function in libavcodec/h264.c in FFmpeg before 2.1 incorrectly relies on a certain droppable field, which allows remote attackers to cause a denial of service (deadlock) or possibly have unspecified other impact via crafted H.264 data.

Status

References

• https://github.com/FFmpeg/FFmpeg/commit/29ffeef5e73b8f41ff3a3f2242d356759c66f91f
• https://trac.ffmpeg.org/ticket/2927
• http://www.openwall.com/lists/oss-security/2013/12/08
• https://www.cve.org/CVERecord?id=CVE-2013-7008
• NVD
• Launchpad
• Debian