FFmpeg Denial of Service Vulnerability (CVE-2016-2213)
Publish Date: 07 aprile 2016
Gravità: : Alto
Identificatori CVE: CVE-2016-2213
Data notifica: 07 aprile 2016
Descrizione
The vulnerability found in jpeg2000_decode_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 may allow remote attackers to cause a denial of service. It does this using a crafted JPEG 2000 data. Trend Micro researcher Lucas Leong is credited for discovery and reporting of this vulnerability.
Soluzioni
Macchia: : https://www.ffmpeg.org/security.html
Software e versione interessati:
- FFmpeg before 2.8.6