Use-after-free vulnerability in the ff_h264_free_tables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted H.264 data in an MP4 file, as demonstrated by an HTML VIDEO element that references H.264 data.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ffmpeg | Ffmpeg | * | 2.3.5 (including) |
| Ffmpeg | Ubuntu | lucid | * |
| Ffmpeg | Ubuntu | upstream | * |
| Libav | Ubuntu | esm-infra-legacy/trusty | * |
| Libav | Ubuntu | trusty | * |
| Libav | Ubuntu | trusty/esm | * |
| Libav | Ubuntu | upstream | * |
| Libav | Ubuntu | utopic | * |
| Libav | Ubuntu | vivid | * |