CVE-2014-7933

Use-after-free vulnerability in the matroska_read_seek function in libavformat/matroskadec.c in FFmpeg before 2.5.1, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Matroska file that triggers improper maintenance of tracks data.

Affected products

Alt Linux, Ffmpeg, Google Chrome, Red Hat, Suse, Ubuntu

Google Chrome

≤ 40.0.2214.85

Fix

Available

CVSS 2.0

7.5 HIGH

EPSS

2.8% (85th percentile)

NVD status

Modified

Published

2015-01-22