Back to Database
Status published
Medium
CVE-2015-5479
The ff_h263_decode_mba function in libavcodec/ituh263dec.c in Libav before 11.5 allows...
Vulnerability Description
The ff_h263_decode_mba function in libavcodec/ituh263dec.c in Libav before 11.5 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a file with crafted dimensions.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-5479
Credits & Attribution
No credits recorded in the NVD database.
References
- http://lists.opensuse.org/opensuse-updates/2016-06/msg00105.html
- https://libav.org/releases/libav-11.5.changelog
- http://www.ubuntu.com/usn/USN-2944-1
- https://blogs.gentoo.org/ago/2015/07/16/libav-divide-by-zero-in-ff_h263_decode_mba/
- http://www.securityfocus.com/bid/75932
- https://git.libav.org/?p=libav.git%3Ba=commitdiff%3Bh=0a49a62f998747cfa564d98d36a459fe70d3299b
More from ubuntu
View All →CVE-2015-2285
The logrotation script (/etc/cron.daily/upstart) in the Ubuntu Upstart package before...
High
7.2
CVE-2015-2150
Xen 3.3.x through 4.5.x and the Linux kernel through 3.19.1...
Medium
4.9
CVE-2014-1424
apparmor_parser in the apparmor package before 2.8.95~2430-0ubuntu5.1 in Ubuntu 14.04...
Medium
6.4
CVE-2013-1070
Cross-site scripting (XSS) vulnerability in the API in Ubuntu Metal...
Medium
4.3
CVE-2013-1069
Ubuntu Metal as a Service (MaaS) 1.2 and 1.4 uses...
Low
2.1
Affected Vendor
ubuntu
View all reports →Affected Software
ubuntu, libav, leap
Vulnerable Versions:
12.04, 0, 42.1
Timeline
Official Publish:
April 19th, 2016
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.