CVE-2014-125011: FFmpeg ansi.c decode_frame integer coercion

Published Jun 18, 2022

Updated

A vulnerability was found in FFmpeg 2.0. It has been declared as problematic. Affected by this vulnerability is the function decodeframe of the file libavcodec/ansi.c. The manipulation leads to integer coercion error. The attack can be launched remotely. It is recommended to apply a patch to fix this issue.

Affected Software

1 affected component

FFmpeg FFmpeg=2.0

Remediation

Patch Available

http://git.videolan.org/?p=ffmpeg.git;a=commit;h=d42ec8433c687fcbccefa51a7716d81920218e4f

Event History

Jun 18, 2022

CVE Published

via MITRE·06:15 AM

Data Sourced

via MITRE·06:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2014-125011?

The severity of CVE-2014-125011 is high, with a severity keyword of 'high' and a severity value of 7.8.

How does CVE-2014-125011 affect FFmpeg?

CVE-2014-125011 affects the function decode_frame of the file libavcodec/ansi.c in FFmpeg 2.0.

Can CVE-2014-125011 be exploited remotely?

Yes, CVE-2014-125011 can be exploited remotely.

What should I do to fix CVE-2014-125011?

To fix CVE-2014-125011, it is recommended to apply a patch provided by the vendor.

Where can I find more information about CVE-2014-125011?

More information about CVE-2014-125011 can be found at the following references: [link1](http://git.videolan.org/?p=ffmpeg.git;a=commit;h=d42ec8433c687fcbccefa51a7716d81920218e4f) and [link2](https://vuldb.com/?id.12391)