OSVDB ID: 79287 Title: FFmpeg Matroska Codec matroska_parse_block Function Unspecified Buffer Overflow |
Info |
|
|
Dates |
||||
|
|
Description |
FFmpeg contains an unspecified overflow condition in the 'matroska_parse_block' function in libavformat/matroskadec.c. With a specially crafted MKV file, a context-dependent attacker can cause a heap-based buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code. |
Classification |
Location:
Context Dependent
Attack Type: Input Manipulation Impact: Loss of Integrity Solution: Third-Party Solution, Solution Unknown Exploit: PoC Public Disclosure: Vendor Verified, Coordinated Disclosure OSVDB: Web Related |
Solution |
OSVDB is not currently aware of a solution for this vulnerability. Upgrade to Google Chrome version 17.0.963.56 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |