CVE-2016-2329
libavcodec/tiff.c in FFmpeg before 2.8.6 does not properly validate RowsPerStrip values and YCbCr chrominance subsampling factors, which allows remote...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
libavcodec/tiff.c in FFmpeg before 2.8.6 does not properly validate RowsPerStrip values and YCbCr chrominance subsampling factors, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted TIFF file, related to the tiff_decode_tag and decode_frame functions.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2016-2329 ffmpeg Corrigé dans: 2.8.6-1
Références
- advisory lists.opensuse.org
- advisory securityfocus.com
- advisory securitytracker.com
- advisory security.gentoo.org
- web git.videolan.org