CVE-2015-6761
15.10.2015, 10:59
The update_dimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service (race condition and memory corruption) or possibly have unspecified other impact via a crafted WebM file.
| Vendor | Product | Version |
|---|---|---|
| ffmpeg | ffmpeg | 𝑥 ≤ 2.8.1 |
| chrome | 𝑥 ≤ 45.0.2454.101 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| chromium-browser |
| ||||||||||||||||||
| ffmpeg |
| ||||||||||||||||||
| libav |
| ||||||||||||||||||
| oxide-qt |
|
References