CVE-2013-0858

The atrac3_decode_init function in libavcodec/atrac3.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via ATRAC3 data with the joint stereo coding mode set and fewer than two channels.

Score

CVSS 2.0 9.3 Critical

Status

Modified - chrome-cve-admin@google.com

Published

2013-12-07

Last modified

2024-08-06

Affected products

• Debian Linux (Debian)
• Ffmpeg (Ffmpeg)

References

• http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=13451f5520ce6b0afde861b2285dda659f8d4fb4
• http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=2502914c5f8eb77659d7c0868396862557a63245
• http://www.debian.org/security/2013/dsa-2793
• http://www.ffmpeg.org/security.html