FFmpeg Multiple Vulnerabilities
Last Update Date:
26 Sep 2013 16:38
Release Date:
26 Sep 2013
3789
Views
RISK: Medium Risk
TYPE: Clients - Audio & Video
Multiple vulnerabilities have been identified in FFmpeg, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise an application using the library.
- Some errors within the "ff_vc1_decode_init_alloc_tables()" function (libavcodec/vc1dec.c) can be exploited to exhaust available memory.
- An integer overflow error within the "decode_frame()" function (libavcodec/wnv1.c) can be exploited to cause a heap-based buffer overflow.
- A boundary error within the "ea_read_packet()" function (libavformat/electronicarts.c) can be exploited to trigger an out-of-bounds memory read access and subsequently cause a crash.
Impact
- Denial of Service
- Remote Code Execution
System / Technologies affected
- FFmpeg 2.x
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- Fixed in the git repository.
Vulnerability Identifier
- No CVE information is available
Source
Related Link
Share with