CVE-2013-3675

The process_frame_obj function in sanm.c in libavcodec in FFmpeg before 1.2.1 does not validate width and height values, which allows remote attackers to cause…

published June 10, 2013

CVSS
—
EPSS
2%
Percentile
81.1
In the wild
Unconfirmed
What it is

The process_frame_obj function in sanm.c in libavcodec in FFmpeg before 1.2.1 does not validate width and height values, which allows remote attackers to cause a denial of service (integer overflow, out-of-bounds array access, and application crash) via crafted LucasArts Smush video data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02063 · 81.1th percentile
Published
2013-06-10T01:00Z
EPSS history
Timeline
  • 10 JUN 01:00Z
    The process_frame_obj function in sanm.c in libavcodec in FFmpeg before 1.2.1 does not validate width and height values, which allows remote attackers to cause…
    cvelistv5