CVE-2013-7017: Medium severity FFmpeg FFmpeg vulnerability
Published Dec 9, 2013
·Updated
libavcodec/jpeg2000.c in FFmpeg before 2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) or possibly have unspecified other impact via crafted JPEG2000 data.
Affected Software
64 affected components
FFmpeg FFmpeg<=2.0.1
FFmpeg FFmpeg=0.3
FFmpeg FFmpeg=0.3.1
FFmpeg FFmpeg=0.3.2
FFmpeg FFmpeg=0.3.3
FFmpeg FFmpeg=0.3.4
FFmpeg FFmpeg=0.4.0
FFmpeg FFmpeg=0.4.2
FFmpeg FFmpeg=0.4.3
FFmpeg FFmpeg=0.4.4
FFmpeg FFmpeg=0.4.5
FFmpeg FFmpeg=0.4.6
FFmpeg FFmpeg=0.4.7
FFmpeg FFmpeg=0.4.8
FFmpeg FFmpeg=0.4.9-pre1
FFmpeg FFmpeg=0.5
FFmpeg FFmpeg=0.5.1
FFmpeg FFmpeg=0.5.2
FFmpeg FFmpeg=0.5.3
FFmpeg FFmpeg=0.5.4
FFmpeg FFmpeg=0.5.4.5
FFmpeg FFmpeg=0.5.4.6
FFmpeg FFmpeg=0.5.5
FFmpeg FFmpeg=0.6
FFmpeg FFmpeg=0.6.1
FFmpeg FFmpeg=0.6.2
FFmpeg FFmpeg=0.6.3
FFmpeg FFmpeg=0.7
FFmpeg FFmpeg=0.7.1
FFmpeg FFmpeg=0.7.2
FFmpeg FFmpeg=0.7.3
FFmpeg FFmpeg=0.7.4
FFmpeg FFmpeg=0.7.5
FFmpeg FFmpeg=0.7.6
FFmpeg FFmpeg=0.7.7
FFmpeg FFmpeg=0.7.8
FFmpeg FFmpeg=0.7.9
FFmpeg FFmpeg=0.7.11
FFmpeg FFmpeg=0.7.12
FFmpeg FFmpeg=0.8.0
FFmpeg FFmpeg=0.8.1
FFmpeg FFmpeg=0.8.2
FFmpeg FFmpeg=0.8.5
FFmpeg FFmpeg=0.8.5.3
FFmpeg FFmpeg=0.8.5.4
FFmpeg FFmpeg=0.8.6
FFmpeg FFmpeg=0.8.7
FFmpeg FFmpeg=0.8.8
FFmpeg FFmpeg=0.8.10
FFmpeg FFmpeg=0.8.11
FFmpeg FFmpeg=0.9
FFmpeg FFmpeg=0.9.1
FFmpeg FFmpeg=0.10
FFmpeg FFmpeg=0.10.3
FFmpeg FFmpeg=0.10.4
FFmpeg FFmpeg=0.11
FFmpeg FFmpeg=1.0
FFmpeg FFmpeg=1.1.1
FFmpeg FFmpeg=1.1.2
FFmpeg FFmpeg=1.1.3
FFmpeg FFmpeg=1.1.4
FFmpeg FFmpeg=1.2
FFmpeg FFmpeg=1.2.1
FFmpeg FFmpeg=2.0
Remediation
Patch Available
Patch Available
Event History
Dec 9, 2013
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Data Sourced
via NVD·04:36 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-7017?
CVE-2013-7017 is classified as a denial of service vulnerability due to an invalid pointer dereference in FFmpeg.
2
How do I fix CVE-2013-7017?
To fix CVE-2013-7017, update FFmpeg to version 2.1 or later.
3
Which versions of FFmpeg are affected by CVE-2013-7017?
CVE-2013-7017 affects all FFmpeg versions prior to 2.1, including versions 0.3 to 2.0.1.
4
What impact can CVE-2013-7017 have on my system?
CVE-2013-7017 can cause denial of service attacks, potentially crashing the application processing crafted JPEG2000 data.
5
Is CVE-2013-7017 being actively exploited?
There is no public indication that CVE-2013-7017 is being actively exploited in the wild as of now.