Out-of-Bounds Array Access in FFmpeg's ID3v2 Parsing Function

CVE-2013-0847 · HIGH Severity

AV:N/AC:M/AU:N/C:C/I:C/A:C

The ff_id3v2_parse function in libavformat/id3v2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via ID3v2 header data, which triggers an out-of-bounds array access.

Learn more about our Web Application Penetration Testing UK.