OSVDB ID: 78639

Title: FFmpeg libavcodec/kgv1dec.c decode_frame() Function Media File Handling Unspecified Remote Issue

Info

Disclosure

Jan 30, 2012

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Jan 30, 2012

Description

Classification

Location: Local / Remote, Context Dependent
Attack Type: Input Manipulation
Impact: Impact Unknown
Solution: Upgrade
Exploit: Exploit Unknown
Disclosure: Vendor Verified

Solution

Upgrade to version 0.10 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

FFmpeg Project

FFmpeg

0.9

References

CVE ID: 2011-3945 (see also: NVD)
Secunia Advisory ID: 47765 51085
Related OSVDB ID: 78634 78635 78636 78637 78638 78640 78641 78642 78643 78644 78645 78646 78647 78648 78649 78650
Vendor Specific Solution URL: http://comments.gmane.org/gmane.comp.video.libav.devel/19620
Vendor Specific News/Changelog Entry: http://ffmpeg.org/security.html
http://git.libav.org/?p=libav.git;a=commit;h=a02e8df973f5478ec82f4c507f5b5b191a5ecb6b
http://git.videolan.org/?p=ffmpeg.git;a=commit;h=807a045ab7f51993a2c1b3116016cbbd4f3d20d6
http://www.gentoo.org/security/en/glsa/glsa-201210-06.xml
Other Advisory URL: http://www.mandriva.com/security/advisories?name=MDVSA-2012:076

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/78639