Description
The prepare_sdp_description function in ffserver.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service (crash) via vectors related to the rtp format.
Metrics
CVSS 2.0 4.3/10
AV:N/AC:M/Au:N/C:N/I:N/A:PAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=9929991da7b843e7d80154fcacc4e80579b86a2d
- http://secunia.com/advisories/51964Vendor Advisory
- http://www.ffmpeg.org/security.html
- http://www.osvdb.org/93232
- https://trac.ffmpeg.org/ticket/1986
- http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=9929991da7b843e7d80154fcacc4e80579b86a2d
- http://secunia.com/advisories/51964Vendor Advisory
- http://www.ffmpeg.org/security.html
- http://www.osvdb.org/93232
- https://trac.ffmpeg.org/ticket/1986
Timeline
- Published
- Dec 24, 2013
- Last modified
- Jun 16, 2026
- NVD status
- Modified