CVE-2014-8543
HighSummary
In the libavcodec library in FFmpeg before version 2.4.2, not all lines of HHV Intra blocks are considered during image height validation. This may allow remote attackers to cause a denial of service (out-of-bounds access) or potentially have unspecified other impact via crafted MM video data.
Risk Assessment
The organization may be exposed to attacks that lead to denial of service, affecting the availability of video services. Additionally, there is a risk of unspecified impact on systems processing video data.
Recommendation
It is recommended to update FFmpeg to version 2.4.2 or later to mitigate this vulnerability. Systems should also be monitored for suspicious video data.
Other vulnerabilities in FFmpeg (libavcodec)
Original NVD description (English source)
libavcodec/mmvideo.c in FFmpeg before 2.4.2 does not consider all lines of HHV Intra blocks during validation of image height, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted MM video data.