CVE-2013-7009

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1

Description The issue is related to the rpza decode stream function in libavcodec/rpza.c, which does not properly maintain a pointer to pixel data. This allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Apple RPZA data.

Recommendations For versions prior to 2.1, update to version 2.1 or later to resolve the issue.