SB2014110503 - Multiple vulnerabilities in ffmpeg.sourceforge.net FFmpeg

Description

This security bulletin contains information about 3 secuirty vulnerabilities.

1) Input validation error (CVE-ID: CVE-2014-8545)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

libavcodec/pngdec.c in FFmpeg before 2.4.2 accepts the monochrome-black format without verifying that the bits-per-pixel value is 1, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted PNG data.

2) Input validation error (CVE-ID: CVE-2014-8546)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Integer underflow in libavcodec/cinepak.c in FFmpeg before 2.4.2 allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted Cinepak video data.

3) Input validation error (CVE-ID: CVE-2014-8549)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

libavcodec/on2avc.c in FFmpeg before 2.4.2 does not constrain the number of channels to at most 2, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted On2 data.

Remediation

Install update from vendor's website.

References

• http://git.videolan.org/?p=ffmpeg.git;a=commit;h=3e2b745020c2dbf0201fe7df3dad9e7e0b2e1bb6
• http://www.ffmpeg.org/security.html
• https://security.gentoo.org/glsa/201603-06
• http://git.videolan.org/?p=ffmpeg.git;a=commit;h=e7e5114c506957f40aafd794e06de1a7e341e9d5
• http://git.videolan.org/?p=ffmpeg.git;a=commit;h=550f3e9df3410b3dd975e590042c0d83e20a8da3