| Package | Affected versions | Patched versions |
|---|---|---|
| ffmpeg | ≥ 1.1, < 1.1.12≥ 1.2, < 1.2.7≥ 2.0, < 2.0.5≥ 2.1, < 2.1.5≥ 2.2, < 2.2.4< 0.10.14 | 1.1.121.2.72.0.52.1.52.2.40.10.14 |
Integer overflow in the get_len function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.4 allows remote attackers to execute arbitrary code via a crafted Literal Run.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free