| Package | Affected versions | Patched versions |
|---|---|---|
| ffmpeg | = 1.0≤ 1.0.1 |
The av_probe_input_buffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running with certain -probesize values, allows remote attackers to cause a denial of service (crash) via a crafted MP3 file, possibly related to frame size or lack of sufficient "frames to estimate rate."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free