CVE-2014-4609
Fixed in a distro release EPSS 6%
Integer overflow in the get_len function in libavutil/lzo.c in Libav before 0.8.13, 9.x before 9.14, and 10.x before 10.2 allows remote attackers to execute arbitrary code via a crafted Literal Run.
Products: libav
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 7 | libav | 6:0.8.13-1 |
| Ubuntu 14.04 LTS | libav | 6:9.14-0ubuntu0.14.04.1 |