Debian/ffmpeg: unknown
The ff_er_frame_end function in libavcodec/error_resilience.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.1 does not properly verify that a frame is fully initialized, which allows remote attackers to
Action: Upgrade ffmpeg to 7:2.4.1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7:2.4.1-1 | - |
Fixed versions
| 7:2.4.1-1 |
Sources
- osv: DEBIAN-CVE-2013-0860#Debian:13/ffmpeg
- https://security-tracker.debian.org/tracker/CVE-2013-0860
published · modified · JSON