CVE-2015-3417
Gentoo Linux Security Advisory 201705-08
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Use-after-free vulnerability in the ff_h264_free_tables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted H.264 data in an MP4 file, as demonstrated by an HTML VIDEO element that references H.264 data.
Vulnerabilidad de uso después de liberación en la función ff_h264_free_tables en libavcodec/h264.c en FFmpeg anterior a 2.3.6 permite a atacantes remotos causar una denegación de servicio o posiblemente tener otro impacto no especificado a través de datos H.264 manipulados en un fichero MP4, tal y como fue demostrado por un elemento HTML VIDEO que hace referencia a datos H.264.
Multiple vulnerabilities have been found in libav, the worst of which may allow execution of arbitrary code. Versions less than 11.8 are affected.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2015-04-24 CVE Reserved
- 2015-04-24 CVE Published
- 2024-08-06 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (7)
| URL | Tag | Source |
|---|---|---|
| http://seclists.org/fulldisclosure/2015/Apr/31 | Mailing List |
|
| http://www.securityfocus.com/bid/74385 | Third Party Advisory | |
| http://www.securitytracker.com/id/1032198 | Third Party Advisory | |
| https://git.libav.org/?p=libav.git%3Ba=blob%3Bf=Changelog%3Bhb=refs/tags/v11.4 | X_refsource_confirm |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://github.com/FFmpeg/FFmpeg/commit/e8714f6f93d1a32f4e4655209960afcf4c185214 | 2023-11-07 |
| URL | Date | SRC |
|---|---|---|
| http://www.debian.org/security/2015/dsa-3288 | 2023-11-07 | |
| https://security.gentoo.org/glsa/201705-08 | 2023-11-07 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | <= 2.3.5 Search vendor "Ffmpeg" for product "Ffmpeg" and version " <= 2.3.5" | - |
Affected
| ||||||
| Debian Search vendor "Debian" | Debian Linux Search vendor "Debian" for product "Debian Linux" | 8.0 Search vendor "Debian" for product "Debian Linux" and version "8.0" | - |
Affected
| ||||||