FFmpeg Multiple Vulnerabilities
Last Update Date:
31 Jan 2012 11:45
Release Date:
31 Jan 2012
5771
Views
RISK: Medium Risk
TYPE: Clients - Audio & Video
Multiple vulnerabilities have been identified in FFmpeg, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise an application using the library.
- A boundary error within the DV decoder can be exploited to cause an out-of-bounds read via specially crafted media files.
- An NULL-pointer dereference error within the DV decoder can be exploited to cause a crash via specially crafted media files.
- A double-free error within the "vp3_update_thread_context()" function (libavcodec/vp3.c) can be exploited via specially crafted media files.
- An error within the "codec_get_buffer()" function (ffmpeg.c) can be exploited via specially crafted media files.
- An error within the "ff_h263_decode_frame()" function (libavformat/nsvdec.c) can be exploited via specially crafted media files.
- A boundary error within the "nsv_read_chunk()" function (libavformat/nsvdec.c) can be exploited to cause an out-of-bounds write via specially crafted media files.
- An error within the "decode_mb()" function (libavcodec/error_resilience.c) can be exploited to cause an out-of-bounds write via specially crafted media files.
- An error within the "smacker_decode_header_tree()" function (libavcodec/smacker.c) can be exploited via specially crafted media files.
- An error within the "decode_frame()" function (libavcodec/kgv1dec.c) can be exploited via specially crafted media files.
- An error within the H264 decoder can be exploited to cause an infinite loop via specially crafted media files.
- An error within the "read_offs()" function (libavcodec/mjpegbdec.c) can be exploited via specially crafted media files.
- An error within the "dirac_unpack_idwt_params()" function (libavcodec/diracdec.c) can be exploited via specially crafted media files.
- An error within the "dirac_decode_data_unit()" function (libavcodec/diracdec.c) can be exploited via specially crafted media files.
- An error within the "dpcm_decode_frame()" function (libavcodec/dpcm.c) can be exploited via specially crafted media files.
- An error within the "decode_init()" function (libavcodec/kmvc.c) can be exploited via specially crafted media files.
- An error within the "rv20_decode_picture_header()" function (libavcodec/rv10.c) can be exploited to cause a crash via specially crafted Matroska files.
- A NULL-pointer dereference error within the "decode_mb_info()" function (libavcodec/indeo5.c) can be exploited to cause a crash via specially crafted media files.
Impact
- Denial of Service
- Remote Code Execution
System / Technologies affected
- FFmpeg 0.9.x and prior
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- Update to version 0.10.
Vulnerability Identifier
- CVE-2011-3929
- CVE-2011-3934
- CVE-2011-3935
- CVE-2011-3936
- CVE-2011-3937
- CVE-2011-3940
- CVE-2011-3941
- CVE-2011-3944
- CVE-2011-3945
- CVE-2011-3946
- CVE-2011-3947
- CVE-2011-3949
- CVE-2011-3950
- CVE-2011-3951
- CVE-2011-3952
Source
Related Link
Share with