SB2016120312 - Multiple vulnerabilities in FFmpeg

Main Vulnerability Database SB2016120312

SB2016120312 - Multiple vulnerabilities in FFmpeg

Published: December 3, 2016 Updated: June 12, 2025

Security Bulletin ID SB2016120312

Severity

High

Patch available

YES

Number of vulnerabilities 7

Exploitation vector Remote access

Highest impact Code execution

Breakdown by Severity

Low
Medium
High
Critical

Description

This security bulletin contains information about 7 secuirty vulnerabilities.

1) Buffer overflow (CVE-ID: CVE-2014-8548)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Off-by-one error in libavcodec/smc.c in FFmpeg before 2.4.2 allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted Quicktime Graphics (aka SMC) video data.

2) Buffer overflow (CVE-ID: CVE-2014-8547)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

libavcodec/gifdec.c in FFmpeg before 2.4.2 does not properly compute image heights, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted GIF data.

3) Input validation error (CVE-ID: CVE-2014-8544)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

libavcodec/tiff.c in FFmpeg before 2.4.2 does not properly validate bits-per-pixel fields, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted TIFF data.

4) Input validation error (CVE-ID: CVE-2014-8543)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

libavcodec/mmvideo.c in FFmpeg before 2.4.2 does not consider all lines of HHV Intra blocks during validation of image height, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted MM video data.

5) Buffer overflow (CVE-ID: CVE-2014-8541)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

libavcodec/mjpegdec.c in FFmpeg before 2.4.2 considers only dimension differences, and not bits-per-pixel differences, when determining whether an image size has changed, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted MJPEG data.

6) Stack-based buffer overflow (CVE-ID: CVE-2008-3162)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the str_read_packet function in libavformat/psxstr.c when processing a crafted STR file that interleaves audio and video sectors. A remote unauthenticated attacker can trigger stack-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

7) Input validation error (CVE-ID: CVE-2006-4800)

The vulnerability allows remote attackers to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can cause a denial of service or possibly execute arbitrary code via multiple unspecified vectors in (1) dtsdec.c, (2) vorbis.c, (3) rm.c, (4) sierravmd.c, (5) smacker.c, (6) tta.c, (7) 4xm.c, (8) alac.c, (9) cook.c, (10) shorten.c, (11) smacker.c, (12) snow.c, and (13) tta.c.

Remediation

Install update from vendor's website.

References