FFmpeg init_tile Function Denial-of-Service Vulnerability (CVE-2015-8219)

FFmpeg init_tile Function Denial-of-Service Vulnerability (CVE-2015-8219)
FFmpeg init_tile Function Denial-of-Service Vulnerability (CVE-2015-8219)

Release date:
Updated on:

Affected Systems:

FFmpeg <2.8.2

Description:

CVE (CAN) ID: CVE-2015-8219

FFmpeg is a free software that allows you to perform video, transfer, and stream functions in multiple formats of audio and video.

Versions earlier than FFmpeg 2.8.2, libavcodec/ipv2000dec. the init_tile function in c does not limit the minimum and maximum values of tile coordinates. Remote attackers can exploit this vulnerability to cause DoS (out-of-bounds array access) by constructing JPEG 2000 data ).

<* Source: Michael Niedermayer
*>

Suggestion:

Vendor patch:

FFmpeg
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://ffmpeg.org/security.html

Refer:
Http://git.videolan.org /? P = ffmpeg. git; a = commit; h = 43492ff3ab68a343c1264801baa1d5a02de10167

Compile FFmpeg in Linux to download and compile the source file

Linux compiling and upgrading FFmpeg

Install FFMPEG on CentOS 5.6

Install FFmpeg in Ubuntu

Compile ffmpeg in Ubuntu 12.04

Install FFmpeg 2.2.2 In PPA in Ubuntu 14.04

FFmpeg details: click here
FFmpeg: click here

This article permanently updates the link address: