CVE-2013-2496

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2013-2496

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2013-2496.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2013-2496

Downstream

DEBIAN-CVE-2013-2496

Published

2013-03-09T11:55:01Z

Modified

2026-04-10T03:44:26.086521Z

Summary

[none]

Details

The msrledecode81624_32 function in msrledec.c in libavcodec in FFmpeg through 1.1.3 does not properly determine certain end pointers, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted Microsoft RLE data.

References

http://www.ubuntu.com/usn/USN-1790-1
http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=e398990eb87785e20e065cd3f14d1dbb69df4392

CVE-2013-2496

Affected packages