CVE-2013-4358 | Vulnerability Database | Aqua Security

libavcodec/h264.c in FFmpeg before 0.11.4 allows remote attackers to cause a denial of service (crash) via vectors related to alternating bit depths in H.264 data.

Affected Software

Name	Vendor	Start Version	End Version
Ffmpeg	Ffmpeg	*	0.11.3 (including)
Ffmpeg	Ffmpeg	0.11 (including)	0.11 (including)
Ffmpeg	Ffmpeg	0.11.1 (including)	0.11.1 (including)
Ffmpeg	Ffmpeg	0.11.2 (including)	0.11.2 (including)
Ffmpeg	Ubuntu	lucid	*
Ffmpeg-extra	Ubuntu	lucid	*
Libav	Ubuntu	devel	*
Libav	Ubuntu	precise	*
Libav	Ubuntu	quantal	*
Libav	Ubuntu	raring	*
Libav	Ubuntu	saucy	*
Libav-extra	Ubuntu	devel	*
Libav-extra	Ubuntu	precise	*
Libav-extra	Ubuntu	quantal	*
Libav-extra	Ubuntu	raring	*
Libav-extra	Ubuntu	saucy	*

References

http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=072be3e8969f24113d599444be4d6a0ed04a6602
http://www.ffmpeg.org/security.html
http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=072be3e8969f24113d599444be4d6a0ed04a6602
http://www.ffmpeg.org/security.html

NVD	https://nvd.nist.gov/vuln/detail/CVE-2013-4358
CWE	https://cwe.mitre.org/data/definitions/.html