Multiple FFmpeg Vulnerabilities

Multiple FFmpeg Vulnerabilities

Release date:
Updated on: 2013-12-02

Affected Systems:
FFmpeg 2.x
Description:
--------------------------------------------------------------------------------
FFmpeg is a free software that allows you to perform video, transfer, and stream functions in multiple formats of audio and video.

FFmpeg 2.1 has a security vulnerability in the implementation of multiple functions, which can be exploited to cause DoS and damage affected applications.

1. An error occurs in the "decode_slice_header ()" function (libavcodec/h264.c), resulting in a deadlock.
2. The "rpza_decode_stream ()" function (libavcodec/rpza. c) has a boundary error, which can cause cross-border write.
3. The "get_siz ()" function (libavcodec/ipv2000dec. c) has a boundary error, which can cause cross-border access.
4. An error occurs in the "g2m_init_buffers ()" function (libavcodec/g2meet. c), which can cause cross-border access.
5. An integer overflow error exists in the "add_bytes_l2_c ()" function (libavcodec/pngdsp. c), which may cause cross-border writing.
6. An error occurs in the "flashsv_decode_frame ()" function (libavcodec/flashsv. c), resulting in out-of-bounds memory access.
7. An error occurs in the "get_siz ()" function (libavcodec/ipv2000dec. c), which can cause out-of-bounds memory access.
8. An error occurs in the "ff_00002000_init_component ()" function (libavcodec/00002000.c), leading to invalid pointer reference.
9. An error occurs in the "get_cox ()" and "decode_cblk ()" function (libavcodec/ipv2000dec. c), which may result in out-of-bounds memory access.
10. An error occurs in the "get_cox ()" function (libavcodec/20172000dec. c), which can lead to out-of-bounds memory access.
11. An error occurs in the "read_header ()" function (libavcodec/ffv1dec. c), which may lead to out-of-bounds memory write.
12. The "filter_frame ()" function (libavfilter/vf_fps.c) has an error.
13. An error occurs in the "g2m_init_buffers ()" function (libavcodec/g2meet. c), which can lead to out-of-bounds memory access.
14. An error occurs in the "ff_combine_frame ()" function (libavcodec/parser. c), which may lead to cross-border write.
15. An error occurs in the "00002000_decode_tile ()" function (libavcodec/00002000dec. c), which can lead to out-of-bounds memory access.

<* Source: Piotr Bandurski
Laurent Butti
Krieger

Link: http://secunia.com/advisories/55802/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

FFmpeg
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://ffmpeg.org/security.html

FFmpeg details: click here
FFmpeg: click here

Recommended reading:

Compile FFmpeg in Linux to download and compile the source file

Linux compiling and upgrading FFmpeg