| Package | Affected versions | Patched versions |
|---|---|---|
| ffmpeg | = 2.8.3 |
The ff_get_buffer function in libavcodec/utils.c in FFmpeg before 2.8.4 preserves width and height values after a failure, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted .mov file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free