CVE-2013-2277
Published: 27 February 2013
The ff_h264_decode_seq_parameter_set function in h264_ps.c in libavcodec in FFmpeg before 1.1.3 does not validate the relationship between luma depth and chroma depth, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted H.264 data.
Notes
| Author | Note |
|---|---|
| mdeslaur | ffmpeg-extra in multiverse needs to have matching version libav-extra is built with tarball produced by libav package |
| jdstrand | ffmpeg on 10.04 LTS has no error checking of sps->bit_depth_luma or sps->bit_depth_chroma (see libavcodec/h264.c line 7140 (after applying quilt patches)) libav has no error checking of sps->bit_depth_luma os |
| sps- | bit_depth_chroma (see libavcodec/h264_ps.c, line 338 on 11.10, line 348 on 12.04 LTS and higher) |
| mdeslaur | ignoring releases near EoL. New version not available from upstream. |
Priority
Status
| Package | Release | Status |
|---|---|---|
|
ffmpeg Launchpad, Ubuntu, Debian |
hardy |
Ignored
(end of life)
|
| lucid |
Ignored
|
|
| oneiric |
Does not exist
|
|
| precise |
Does not exist
|
|
| quantal |
Does not exist
|
|
| raring |
Does not exist
|
|
| upstream |
Needs triage
|
|
|
Patches: upstream: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=bdeb61ccc67911cfc5e20c7cfb1312d0501ca90a |
||
|
ffmpeg-extra Launchpad, Ubuntu, Debian |
hardy |
Does not exist
|
| lucid |
Ignored
|
|
| oneiric |
Does not exist
|
|
| precise |
Does not exist
|
|
| quantal |
Does not exist
|
|
| raring |
Does not exist
|
|
| upstream |
Needs triage
|
|
|
libav Launchpad, Ubuntu, Debian |
hardy |
Does not exist
|
| lucid |
Does not exist
|
|
| oneiric |
Ignored
|
|
| precise |
Released
(4:0.8.6-0ubuntu0.12.04.1)
|
|
| quantal |
Released
(6:0.8.6-0ubuntu0.12.10.1)
|
|
| raring |
Not vulnerable
(6:0.8.6-1ubuntu2)
|
|
| upstream |
Needs triage
|
|
|
Patches: upstream: http://git.libav.org/?p=libav.git;a=commit;h=9e48d77158dcb104fb35b90593ace0b248bda7e1 |
||
|
libav-extra Launchpad, Ubuntu, Debian |
hardy |
Does not exist
|
| lucid |
Does not exist
|
|
| oneiric |
Ignored
|
|
| precise |
Released
(4:0.8.6ubuntu0.12.04.1)
|
|
| quantal |
Released
(6:0.8.6ubuntu0.12.10.1)
|
|
| raring |
Not vulnerable
(6:0.8.6ubuntu2)
|
|
| upstream |
Needs triage
|
|