ID de Prueba:	1.3.6.1.4.1.25623.1.0.113375
Categoría:	Denial of Service
Título:	FFmpeg 4.x < 4.0.4, 4.1.x < 4.1.2 Denial of Service (DoS) Vulnerability
Resumen:	FFmpeg is prone to a denial of service vulnerability.
Descripción:	Summary: FFmpeg is prone to a denial of service vulnerability. Vulnerability Insight: The studio profile decoder in libavcodec/mpeg4videodec.c allows remote attackers to cause an out-of-array access via crafted MPEG-4 video data. Vulnerability Impact: Successful exploitation would allow an attacker to cause a denial of service or possibly have other unspecified impact. Affected Software/OS: FFmpeg versions 4.0.0 through 4.0.3 and 4.1.0 through 4.1.1. Solution: Update to version 4.0.4 or 4.1.2 respectively. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2019-11339 BugTraq ID: 108037 http://www.securityfocus.com/bid/108037 https://github.com/FFmpeg/FFmpeg/commit/1f686d023b95219db933394a7704ad9aa5f01cbb https://github.com/FFmpeg/FFmpeg/commit/d227ed5d598340e719eff7156b1aa0a4469e9a6a SuSE Security Announcement: openSUSE-SU-2020:0024 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00012.html https://usn.ubuntu.com/3967-1/
Copyright	Copyright (C) 2019 Greenbone Networks GmbH

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.