7.5

CVE-2014-8548

Off-by-one error in libavcodec/smc.c in FFmpeg before 2.4.2 allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted Quicktime Graphics (aka SMC) video data.

Data is provided by the National Vulnerability Database (NVD)
FfmpegFfmpeg Version <= 2.4.1
FfmpegFfmpeg Version0.3
FfmpegFfmpeg Version0.3.1
FfmpegFfmpeg Version0.3.2
FfmpegFfmpeg Version0.3.3
FfmpegFfmpeg Version0.3.4
FfmpegFfmpeg Version0.4.0
FfmpegFfmpeg Version0.4.2
FfmpegFfmpeg Version0.4.3
FfmpegFfmpeg Version0.4.4
FfmpegFfmpeg Version0.4.5
FfmpegFfmpeg Version0.4.6
FfmpegFfmpeg Version0.4.7
FfmpegFfmpeg Version0.4.8
FfmpegFfmpeg Version0.4.9 Updatepre1
FfmpegFfmpeg Version0.5
FfmpegFfmpeg Version0.5.1
FfmpegFfmpeg Version0.5.2
FfmpegFfmpeg Version0.5.3
FfmpegFfmpeg Version0.5.4
FfmpegFfmpeg Version0.5.4.5
FfmpegFfmpeg Version0.5.4.6
FfmpegFfmpeg Version0.5.5
FfmpegFfmpeg Version0.6
FfmpegFfmpeg Version0.6.1
FfmpegFfmpeg Version0.6.2
FfmpegFfmpeg Version0.6.3
FfmpegFfmpeg Version0.7
FfmpegFfmpeg Version0.7.1
FfmpegFfmpeg Version0.7.2
FfmpegFfmpeg Version0.7.3
FfmpegFfmpeg Version0.7.4
FfmpegFfmpeg Version0.7.5
FfmpegFfmpeg Version0.7.6
FfmpegFfmpeg Version0.7.7
FfmpegFfmpeg Version0.7.8
FfmpegFfmpeg Version0.7.9
FfmpegFfmpeg Version0.7.11
FfmpegFfmpeg Version0.7.12
FfmpegFfmpeg Version0.8.0
FfmpegFfmpeg Version0.8.1
FfmpegFfmpeg Version0.8.2
FfmpegFfmpeg Version0.8.5
FfmpegFfmpeg Version0.8.5.3
FfmpegFfmpeg Version0.8.5.4
FfmpegFfmpeg Version0.8.6
FfmpegFfmpeg Version0.8.7
FfmpegFfmpeg Version0.8.8
FfmpegFfmpeg Version0.8.10
FfmpegFfmpeg Version0.8.11
FfmpegFfmpeg Version0.9
FfmpegFfmpeg Version0.9.1
FfmpegFfmpeg Version0.10
FfmpegFfmpeg Version0.10.3
FfmpegFfmpeg Version0.10.4
FfmpegFfmpeg Version0.11
FfmpegFfmpeg Version0.11.1
FfmpegFfmpeg Version0.11.2
FfmpegFfmpeg Version0.11.3
FfmpegFfmpeg Version0.11.4
FfmpegFfmpeg Version1.0
FfmpegFfmpeg Version1.0.1
FfmpegFfmpeg Version1.0.2
FfmpegFfmpeg Version1.0.3
FfmpegFfmpeg Version1.0.4
FfmpegFfmpeg Version1.1
FfmpegFfmpeg Version1.1.1
FfmpegFfmpeg Version1.1.2
FfmpegFfmpeg Version1.1.3
FfmpegFfmpeg Version1.1.4
FfmpegFfmpeg Version1.1.5
FfmpegFfmpeg Version1.1.6
FfmpegFfmpeg Version1.1.7
FfmpegFfmpeg Version1.1.8
FfmpegFfmpeg Version1.1.9
FfmpegFfmpeg Version1.1.10
FfmpegFfmpeg Version1.1.11
FfmpegFfmpeg Version1.1.12
FfmpegFfmpeg Version1.1.13
FfmpegFfmpeg Version1.2
FfmpegFfmpeg Version1.2.1
FfmpegFfmpeg Version1.2.3
FfmpegFfmpeg Version1.2.4
FfmpegFfmpeg Version1.2.5
FfmpegFfmpeg Version1.2.6
FfmpegFfmpeg Version1.2.7
FfmpegFfmpeg Version2.0
FfmpegFfmpeg Version2.0.1
FfmpegFfmpeg Version2.0.2
FfmpegFfmpeg Version2.0.3
FfmpegFfmpeg Version2.0.4
FfmpegFfmpeg Version2.0.5
FfmpegFfmpeg Version2.1
FfmpegFfmpeg Version2.1.1
FfmpegFfmpeg Version2.1.2
FfmpegFfmpeg Version2.1.3
FfmpegFfmpeg Version2.1.4
FfmpegFfmpeg Version2.1.5
FfmpegFfmpeg Version2.2
FfmpegFfmpeg Version2.2.4
FfmpegFfmpeg Version2.3
FfmpegFfmpeg Version2.3.2
FfmpegFfmpeg Version2.3.3
FfmpegFfmpeg Version2.3.4
FfmpegFfmpeg Version2.4
CanonicalUbuntu Linux Version12.04 SwEditionlts
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.83% 0.738
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.