CVE-2015-6822

EUVD-2015-6759
The destroy_buffers function in libavcodec/sanm.c in FFmpeg before 2.7.2 does not properly maintain height and width values in the video context, which allows remote attackers to cause a denial of service (segmentation violation and application crash) or possibly have unspecified other impact via crafted LucasArts Smush video data.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 75%
Affected Products (NVD)
VendorProductVersion
ffmpegffmpeg
𝑥
≤ 2.7.1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
ffmpeg
bookworm
7:5.1.6-0+deb12u1
fixed
bookworm (security)
7:5.1.6-0+deb12u1
fixed
bullseye
7:4.3.7-0+deb11u1
fixed
bullseye (security)
7:4.3.8-0+deb11u1
fixed
sid
7:7.1-3
fixed
trixie
7:7.1-3
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
ffmpeg
artful
not-affected
bionic
not-affected
precise
dne
trusty
dne
vivid
not-affected
wily
not-affected
xenial
not-affected
yakkety
not-affected
zesty
not-affected
libav
artful
dne
bionic
dne
precise
not-affected
trusty
not-affected
vivid
ignored
wily
dne
xenial
dne
yakkety
dne
zesty
dne
Common Weakness Enumeration
References
http://ffmpeg.org/security.html
http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=39bbdebb1ed8eb9c9b0cd6db85afde6ba89d86e4
http://www.securitytracker.com/id/1033483
https://lists.debian.org/debian-lts-announce/2018/12/msg00009.html
https://lists.debian.org/debian-lts-announce/2018/12/msg00010.html
http://ffmpeg.org/security.html
http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=39bbdebb1ed8eb9c9b0cd6db85afde6ba89d86e4
http://www.securitytracker.com/id/1033483
https://lists.debian.org/debian-lts-announce/2018/12/msg00009.html
https://lists.debian.org/debian-lts-announce/2018/12/msg00010.html