CVE-2013-0862

Published: Nov 23, 2013Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Multiple integer overflows in the process_frame_obj function in libavcodec/sanm.c in FFmpeg before 1.1.2 allow remote attackers to have an unspecified impact via crafted image dimensions in LucasArts Smush video data, which triggers an out-of-bounds array access.

Affected (59)

Products: Ffmpeg: Ffmpeg

Ffmpeg

1 product

Ffmpeg

Configuration A

59 vulnerable

Vulnerable Software	Affected Versions
Ffmpeg Ffmpeg	Up to 1.1.1
Ffmpeg Ffmpeg	Version 0.10.3
Ffmpeg Ffmpeg	Version 0.10.4
Ffmpeg Ffmpeg	Version 0.10
Ffmpeg Ffmpeg	Version 0.11
Ffmpeg Ffmpeg	Version 0.3.1
Ffmpeg Ffmpeg	Version 0.3.2
Ffmpeg Ffmpeg	Version 0.3.3
Ffmpeg Ffmpeg	Version 0.3.4
Ffmpeg Ffmpeg	Version 0.3
Ffmpeg Ffmpeg	Version 0.4.0
Ffmpeg Ffmpeg	Version 0.4.2
Ffmpeg Ffmpeg	Version 0.4.3
Ffmpeg Ffmpeg	Version 0.4.4
Ffmpeg Ffmpeg	Version 0.4.5
Ffmpeg Ffmpeg	Version 0.4.6
Ffmpeg Ffmpeg	Version 0.4.7
Ffmpeg Ffmpeg	Version 0.4.8
Ffmpeg Ffmpeg	Version 0.4.9 pre1
Ffmpeg Ffmpeg	Version 0.5.1
Ffmpeg Ffmpeg	Version 0.5.2
Ffmpeg Ffmpeg	Version 0.5.3
Ffmpeg Ffmpeg	Version 0.5.4.5
Ffmpeg Ffmpeg	Version 0.5.4.6
Ffmpeg Ffmpeg	Version 0.5.4
Ffmpeg Ffmpeg	Version 0.5
Ffmpeg Ffmpeg	Version 0.6.1
Ffmpeg Ffmpeg	Version 0.6.2
Ffmpeg Ffmpeg	Version 0.6.3
Ffmpeg Ffmpeg	Version 0.6
Ffmpeg Ffmpeg	Version 0.7.11
Ffmpeg Ffmpeg	Version 0.7.12
Ffmpeg Ffmpeg	Version 0.7.1
Ffmpeg Ffmpeg	Version 0.7.2
Ffmpeg Ffmpeg	Version 0.7.3
Ffmpeg Ffmpeg	Version 0.7.4
Ffmpeg Ffmpeg	Version 0.7.5
Ffmpeg Ffmpeg	Version 0.7.6
Ffmpeg Ffmpeg	Version 0.7.7
Ffmpeg Ffmpeg	Version 0.7.8
Ffmpeg Ffmpeg	Version 0.7.9
Ffmpeg Ffmpeg	Version 0.7
Ffmpeg Ffmpeg	Version 0.8.0
Ffmpeg Ffmpeg	Version 0.8.10
Ffmpeg Ffmpeg	Version 0.8.11
Ffmpeg Ffmpeg	Version 0.8.1
Ffmpeg Ffmpeg	Version 0.8.2
Ffmpeg Ffmpeg	Version 0.8.5.3
Ffmpeg Ffmpeg	Version 0.8.5.4
Ffmpeg Ffmpeg	Version 0.8.5
Ffmpeg Ffmpeg	Version 0.8.6
Ffmpeg Ffmpeg	Version 0.8.7
Ffmpeg Ffmpeg	Version 0.8.8
Ffmpeg Ffmpeg	Version 0.9.1
Ffmpeg Ffmpeg	Version 0.9
Ffmpeg Ffmpeg	Version 1.0.1
Ffmpeg Ffmpeg	Version 1.0.2
Ffmpeg Ffmpeg	Version 1.0.3
Ffmpeg Ffmpeg	Version 1.0

Related CWEs

CWE-189

References (6)

http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=f4fb841ad13bab66d4fb0c7ff2a94770df7815d8

Source: chrome-cve-admin@google.com

http://www.ffmpeg.org/security.html

Source: chrome-cve-admin@google.com

https://security.gentoo.org/glsa/201603-06

Source: chrome-cve-admin@google.com

http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=f4fb841ad13bab66d4fb0c7ff2a94770df7815d8

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ffmpeg.org/security.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.gentoo.org/glsa/201603-06

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.