Vulnetix
Try Vulnetix Request Demo
CVE-2014-2099 PUBLISHED CVSS 6.800000190734863 MEDIUM

The msrle_decode_frame function in libavcodec/msrle.c in FFmpeg before 2.1.4 does not properly calculate line sizes, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Microsoft RLE video data.

EPSS 0.43% · 62.3th percentile

Risk Scores

CVSS v2.0
6.800000190734863
EPSS Score
0.43%
62.3th percentile

Affected Products

VendorProductVersions
ffmpegffmpeg2.1.2, 0, 2.0
n/an/an/a

Timeline

References

Open in Interactive Console →