CVE-2014-7933
HighSummary
Use-after-free vulnerability in the matroska_read_seek function in FFmpeg before 2.5.1, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Matroska file that triggers improper maintenance of tracks data.
Risk Assessment
Organizations may be exposed to attacks that lead to denial of service, potentially disrupting service availability and affecting end users.
Recommendation
It is recommended to update FFmpeg to version 2.5.1 or later and review Google Chrome configurations to minimize risks associated with this vulnerability.
Other vulnerabilities in FFmpeg, Google Chrome
See all- CVE-2017-5049High
An integer overflow in FFmpeg in Google Chrome prior to version 57.0.2987.98 for Mac, Windows, and Linux and prior to version 57.0.2987.108 for Android allows a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.
- CVE-2017-5048High
An integer overflow in FFmpeg in Google Chrome prior to version 57.0.2987.98 for Mac, Windows, and Linux and prior to version 57.0.2987.108 for Android allows a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.
Original NVD description (English source)
Use-after-free vulnerability in the matroska_read_seek function in libavformat/matroskadec.c in FFmpeg before 2.5.1, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Matroska file that triggers improper maintenance of tracks data.