CVE-2013-0864: Critical severity ffmpeg vulnerability
The gifcopyimgrect function in libavcodec/gifdec.c in FFmpeg before 1.1.2 performs an incorrect calculation for an "end pointer," which allows remote attackers to have an unspecified impact via crafted GIF data that triggers an out-of-bounds array access.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0864?
CVE-2013-0864 is considered to have a moderate severity level due to the potential for out-of-bounds array access leading to application crashes or arbitrary code execution.
How do I fix CVE-2013-0864?
To fix CVE-2013-0864, you should update FFmpeg to version 1.1.2 or later, which resolves the vulnerability.
What types of attacks are possible with CVE-2013-0864?
CVE-2013-0864 allows remote attackers to exploit crafted GIF files to cause out-of-bounds memory access.
Which versions of FFmpeg are affected by CVE-2013-0864?
FFmpeg versions before 1.1.2, along with various earlier 0.x versions, are affected by CVE-2013-0864.
What mitigation strategies exist for CVE-2013-0864?
In addition to updating FFmpeg, restricting file uploads or processing only trusted GIF files can help mitigate the risks associated with CVE-2013-0864.