FFmpeg ff_get_buffer Function Denial of Service Vulnerability (CVE-2015-8663)

FFmpeg ff_get_buffer Function Denial of Service Vulnerability (CVE-2015-8663)
FFmpeg ff_get_buffer Function Denial of Service Vulnerability (CVE-2015-8663)

Release date:
Updated on:

Affected Systems:

FFmpeg <2.8.4

Description:

CVE (CAN) ID: CVE-2015-8663

FFmpeg is a free software that allows you to perform video, transfer, and stream functions in multiple formats of audio and video.

Versions earlier than FFmpeg 2.8.4, libavcodec/utils. in c, the ff_get_buffer function retains the width and height values after the fault, and remote attackers construct the data by using this function. mov file, which can cause DoS (out-of-bounds array access ).

<* Source: FFmpeg
*>

Suggestion:

Vendor patch:

FFmpeg
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://git.videolan.org /? P = ffmpeg. git; a = commit; h = abee0a1c60612e8620.40a8a3738fffb65e16dbf

Compile FFmpeg in Linux to download and compile the source file

Linux compiling and upgrading FFmpeg

Install FFMPEG on CentOS 5.6

Install FFmpeg in Ubuntu

Compile ffmpeg in Ubuntu 12.04

Install FFmpeg 2.2.2 In PPA in Ubuntu 14.04

FFmpeg details: click here
FFmpeg: click here

This article permanently updates the link address: