FFmpeg Denial of Service Vulnerability (CVE-2016-2213)
Severity: HIGH
CVE Identifier: CVE-2016-2213
Advisory Date: APR 07, 2016
DESCRIPTION
The vulnerability found in jpeg2000_decode_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 may allow remote attackers to cause a denial of service. It does this using a crafted JPEG 2000 data. Trend Micro researcher Lucas Leong is credited for discovery and reporting of this vulnerability.
SOLUTION
AFFECTED SOFTWARE AND VERSION
- FFmpeg before 2.8.6