CVE-2013-2495: Integer Overflow

Q: What is the severity of CVE-2013-2495?

CVE-2013-2495 has been classified as a denial of service vulnerability due to integer overflow issues.

Q: How can I fix CVE-2013-2495?

To mitigate CVE-2013-2495, upgrade to FFmpeg version 1.1.4 or later.

Q: What software versions are affected by CVE-2013-2495?

CVE-2013-2495 affects FFmpeg versions up to 1.1.3 and versions from 0.3 to 1.1.3 inclusively.

Q: What kind of attack can CVE-2013-2495 facilitate?

CVE-2013-2495 can allow remote attackers to cause a denial of service through crafted IFF files.

Q: Where can I find more information on CVE-2013-2495?

For detailed information on CVE-2013-2495, refer to the official FFmpeg repository commits.

Published Mar 9, 2013

Updated

The iffreadheader function in iff.c in libavformat in FFmpeg through 1.1.3 does not properly handle data sizes for Interchange File Format (IFF) data during operations involving a CMAP chunk or a video codec, which allows remote attackers to cause a denial of service (integer overflow, out-of-bounds array access, and application crash) or possibly have unspecified other impact via a crafted header.

Affected Software

59 affected components

FFmpeg FFmpeg<=1.1.3

FFmpeg FFmpeg=0.3

FFmpeg FFmpeg=0.3.1

FFmpeg FFmpeg=0.3.2

FFmpeg FFmpeg=0.3.3

FFmpeg FFmpeg=0.3.4

FFmpeg FFmpeg=0.4.0

FFmpeg FFmpeg=0.4.2

FFmpeg FFmpeg=0.4.3

FFmpeg FFmpeg=0.4.4

FFmpeg FFmpeg=0.4.5

FFmpeg FFmpeg=0.4.6

FFmpeg FFmpeg=0.4.7

FFmpeg FFmpeg=0.4.8

FFmpeg FFmpeg=0.4.9

FFmpeg FFmpeg=0.4.9-pre1

FFmpeg FFmpeg=0.5

FFmpeg FFmpeg=0.5.1

FFmpeg FFmpeg=0.5.2

FFmpeg FFmpeg=0.5.3

FFmpeg FFmpeg=0.5.4

FFmpeg FFmpeg=0.5.4.5

FFmpeg FFmpeg=0.5.4.6

FFmpeg FFmpeg=0.6

FFmpeg FFmpeg=0.6.1

FFmpeg FFmpeg=0.6.2

FFmpeg FFmpeg=0.6.3

FFmpeg FFmpeg=0.7

FFmpeg FFmpeg=0.7.1

FFmpeg FFmpeg=0.7.2

FFmpeg FFmpeg=0.7.3

FFmpeg FFmpeg=0.7.4

FFmpeg FFmpeg=0.7.5

FFmpeg FFmpeg=0.7.6

FFmpeg FFmpeg=0.7.7

FFmpeg FFmpeg=0.7.8

FFmpeg FFmpeg=0.7.9

FFmpeg FFmpeg=0.7.11

FFmpeg FFmpeg=0.7.12

FFmpeg FFmpeg=0.8.0

FFmpeg FFmpeg=0.8.1

FFmpeg FFmpeg=0.8.2

FFmpeg FFmpeg=0.8.5

FFmpeg FFmpeg=0.8.5.3

FFmpeg FFmpeg=0.8.5.4

FFmpeg FFmpeg=0.8.6

FFmpeg FFmpeg=0.8.7

FFmpeg FFmpeg=0.8.8

FFmpeg FFmpeg=0.8.10

FFmpeg FFmpeg=0.8.11

FFmpeg FFmpeg=0.9

FFmpeg FFmpeg=0.9.1

FFmpeg FFmpeg=0.10

FFmpeg FFmpeg=0.10.3

FFmpeg FFmpeg=0.10.4

FFmpeg FFmpeg=0.11

FFmpeg FFmpeg=1.0

FFmpeg FFmpeg=1.1.1

FFmpeg FFmpeg=1.1.2

Remediation

Patch Available

http://git.videolan.org/?p=ffmpeg.git;a=commit;h=3dbc0ff9c3e6f6e0d08ea3d42cb33761bae084ba

Event History

Mar 9, 2013

CVE Published

via MITRE·11:01 AM

Data Sourced

via MITRE·11:01 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-2495?

CVE-2013-2495 has been classified as a denial of service vulnerability due to integer overflow issues.

How can I fix CVE-2013-2495?