FFmpeg Denial of Service Vulnerability (CVE-2016-2213)
Publish Date: 07 avril 2016
Gravité: : Élevé
Identifiant(s) CVE: : CVE-2016-2213
Date du conseil: 07 avril 2016
Description
The vulnerability found in jpeg2000_decode_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 may allow remote attackers to cause a denial of service. It does this using a crafted JPEG 2000 data. Trend Micro researcher Lucas Leong is credited for discovery and reporting of this vulnerability.
Solutions
Patch: : https://www.ffmpeg.org/security.html
Affected software and version:
- FFmpeg before 2.8.6