FFmpeg Denial of Service Vulnerability (CVE-2016-2213)
Severity: : High
CVE Kennungen: : CVE-2016-2213
Advisory Date: 07 de kwietnia de 2016
DESCRIPTION
The vulnerability found in jpeg2000_decode_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 may allow remote attackers to cause a denial of service. It does this using a crafted JPEG 2000 data. Trend Micro researcher Lucas Leong is credited for discovery and reporting of this vulnerability.
SOLUTION
Patch: : https://www.ffmpeg.org/security.html
AFFECTED SOFTWARE AND VERSION:
- FFmpeg before 2.8.6