Vulnerability Description
The atrac3_decode_init function in libavcodec/atrac3.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via ATRAC3 data with the joint stereo coding mode set and fewer than two channels.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian | Debian Linux | 7.0 |
| Ffmpeg | Ffmpeg | <= 1.0.3 |
References
- http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=13451f5520ce6b0afde861b
- http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=2502914c5f8eb77659d7c08
- http://www.debian.org/security/2013/dsa-2793
- http://www.ffmpeg.org/security.html
- http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=13451f5520ce6b0afde861b
- http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=2502914c5f8eb77659d7c08
- http://www.debian.org/security/2013/dsa-2793
- http://www.ffmpeg.org/security.html
FAQ
What is CVE-2013-0858?
CVE-2013-0858 is a vulnerability with a CVSS score of 9.3 (HIGH). The atrac3_decode_init function in libavcodec/atrac3.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via ATRAC3 data with the joint stereo coding mode set and fewer than...
How severe is CVE-2013-0858?
CVE-2013-0858 has been rated HIGH with a CVSS base score of 9.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-0858?
Check the references section above for vendor advisories and patch information. Affected products include: Debian Debian Linux, Ffmpeg Ffmpeg.