SB2013120907 - Multiple vulnerabilities in ffmpeg.sourceforge.net FFmpeg

Main Vulnerability Database SB2013120907

SB2013120907 - Multiple vulnerabilities in ffmpeg.sourceforge.net FFmpeg

Published: December 9, 2013 Updated: August 10, 2020

Security Bulletin ID SB2013120907

Severity

Medium

Patch available

YES

Number of vulnerabilities 7

Exploitation vector Remote access

Highest impact Data manipulation

Breakdown by Severity

Low
Medium
High
Critical

Description

This security bulletin contains information about 7 secuirty vulnerabilities.

1) Input validation error (CVE-ID: CVE-2011-3950)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

The dirac_decode_data_unit function in libavcodec/diracdec.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via a crafted value in the reference pictures number.

2) Input validation error (CVE-ID: CVE-2011-3949)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

The dirac_unpack_idwt_params function in libavcodec/diracdec.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Dirac data.

3) Resource management error (CVE-ID: CVE-2011-3946)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

The ff_h264_decode_sei function in libavcodec/h264_sei.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Supplemental enhancement information (SEI) data, which triggers an infinite loop.

4) Input validation error (CVE-ID: CVE-2011-3944)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

The smacker_decode_header_tree function in libavcodec/smacker.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Smacker data.

5) Buffer overflow (CVE-ID: CVE-2011-3941)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

The decode_mb function in libavcodec/error_resilience.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via vectors related to an uninitialized block index, which triggers an out-of-bounds write.

6) Input validation error (CVE-ID: CVE-2011-3935)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

The codec_get_buffer function in ffmpeg.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via vectors related to a crafted image size.

7) Resource management error (CVE-ID: CVE-2011-3934)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Double free vulnerability in the vp3_update_thread_context function in libavcodec/vp3.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted vp3 data.

Remediation

Install update from vendor's website.

References