tocsin

Debian/ffmpeg: unknown

The vmd_decode function in libavcodec/vmdvideo.c in FFmpeg before 2.5.2 does not validate the relationship between a certain length value and the frame width, which allows remote attackers to cause a

Action: Upgrade ffmpeg to 7:2.5.1-1 or later.

Affected

introducedfixedlast affected
07:2.5.1-1-

Fixed versions

7:2.5.1-1

Sources

published · modified · JSON