Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2016-2329 →

DEBIAN-CVE-2016-2329

libavcodec/tiff.c in FFmpeg before 2.8.6 does not properly validate RowsPerStrip values and YCbCr chrominance subsampling factors, which allows remote...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

libavcodec/tiff.c in FFmpeg before 2.8.6 does not properly validate RowsPerStrip values and YCbCr chrominance subsampling factors, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted TIFF file, related to the tiff_decode_tag and decode_frame functions.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 ffmpeg

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.6-1"}]}]

Debian:13 ffmpeg

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.6-1"}]}]

Debian:14 ffmpeg

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.6-1"}]}]

Références

advisory security-tracker.debian.org