FFmpeg 'libavcodec/iff. c' Memory Corruption Vulnerability

FFmpeg 'libavcodec/iff. c' Memory Corruption Vulnerability

Release date:

Updated on:

Affected Systems:

FFmpeg

Description:

Bugtraq id: 69252

CVE (CAN) ID: CVE-2014-5272

FFmpeg is a free software that allows you to perform video, transfer, and stream functions in multiple formats of audio and video.

FFmpeg has a memory corruption vulnerability in the implementation of 'libavcodec/iff. C'. Attackers can exploit this vulnerability to execute arbitrary code in the application context.

 

<* Source: Michael Niedermayer

*>

 

Suggestion:

Vendor patch:

 

FFmpeg

------

The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

 

Http://ffmpeg.org/security.html