Multiple integer signedness errors in libavcodec/dsputil.c in FFmpeg before 2.1 allow remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted data.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Multiple integer signedness errors in libavcodec/dsputil.c in FFmpeg before 2.1 allow remote attackers to     cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via     crafted data. (CVE-2013-7010)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote host is affected by the vulnerability described in GLSA-201603-06 (FFmpeg: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in FFmpeg.  Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code or cause a       Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. The IDs mentioned above are just a portion of the security issues fixed in this update. A full list of the changes is available at http://git.libav.org/?p=libav.git;a=blob;f=Changelog;hb=refs/tags/v0.8 .10

ID	Name	Product	Family	Severity
218096	Linux Distros Unpatched Vulnerability : CVE-2013-7010	Nessus	Misc.	critical
89899	GLSA-201603-06 : FFmpeg: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
72355	Debian DSA-2855-1 : libav - several vulnerabilities	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2013-7010

critical

Tenable Plugins

critical

critical

high