CVE-2013-0847 on Ubuntu 12.04 LTS (precise) - medium.
Description:
The ff_id3v2_parse function in libavformat/id3v2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via ID3v2 header data, which triggers an out-of-bounds array access.