libavcodec/huffyuvdec.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted Huffyuv data, related to an out-of-bounds write and (1) unchecked return codes from the init_vlc function and (2) "len==0 cases."

The remote host is affected by the vulnerability described in GLSA-201603-06 (FFmpeg: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in FFmpeg.  Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code or cause a       Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-201502-08 (Libav: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Libav. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to open a specially crafted media       file in an application linked against Libav, possibly resulting in       execution of arbitrary code with the privileges of the application or a       Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. A full list of the changes is available at http://git.libav.org/?p=libav.git;a=blob;f=Changelog;hb=refs/tags/v0.8 .15

ID	Name	Product	Family	Type	Severity
89899	GLSA-201603-06 : FFmpeg: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	critical
81231	GLSA-201502-08 : Libav: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	high
77122	Debian DSA-3003-1 : libav - security update	Nessus	Debian Local Security Checks	Local	high

Detections

Analytics

CVE-2013-0868

high

Tenable Plugins

critical

high

high