CVE-2015-1208

Integer underflow in the mov_read_default function in libavformat/mov.c in FFmpeg before 2.4.6 allows remote attackers to obtain sensitive information from heap and/or stack memory via a crafted MP4 file.
Configurations

Configuration 1 (hide)

cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*

History

07 Nov 2023, 02:24

Type Values Removed Values Added
References
  • {'url': 'http://git.videolan.org/?p=ffmpeg.git;a=commit;h=3ebd76a9c57558e284e94da367dd23b435e6a6d0', 'name': 'http://git.videolan.org/?p=ffmpeg.git;a=commit;h=3ebd76a9c57558e284e94da367dd23b435e6a6d0', 'tags': ['Third Party Advisory'], 'refsource': 'CONFIRM'}
  • () http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=3ebd76a9c57558e284e94da367dd23b435e6a6d0 -
References (CONFIRM) https://github.com/FFmpeg/FFmpeg/blob/n2.4.6/Changelog - Third Party Advisory () https://github.com/FFmpeg/FFmpeg/blob/n2.4.6/Changelog -
References (CONFIRM) https://bugs.chromium.org/p/chromium/issues/detail?id=444546 - Third Party Advisory () https://bugs.chromium.org/p/chromium/issues/detail?id=444546 -

Information

Published : 2018-01-09 16:29

Updated : 2024-02-28 16:04


NVD link : CVE-2015-1208

Mitre link : CVE-2015-1208

CVE.ORG link : CVE-2015-1208


JSON object : View

Products Affected

ffmpeg

  • ffmpeg
CWE
CWE-191

Integer Underflow (Wrap or Wraparound)