FFmpeg Multiple Remote Vulnerabilities

Bugtraq ID:	51307
Class:	Unknown
CVE:	CVE-2012-0847 CVE-2012-0848 CVE-2012-0849 CVE-2012-0850 CVE-2012-0851 CVE-2012-0852 CVE-2012-0853 CVE-2012-0854 CVE-2012-0855 CVE-2012-0856 CVE-2012-0857 CVE-2012-0858 CVE-2012-0859
Remote:	Yes
Local:	Yes
Published:	Jan 06 2012 12:00AM
Updated:	Mar 19 2015 09:40AM
Credit:	Oana Stratulat, ami_stuff, Gautam Gupta, cosmin, Diana Elena Muscalu, Shitiz Garg
Vulnerable:	Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 11.10 i386 Ubuntu Ubuntu Linux 11.10 amd64 Ubuntu Ubuntu Linux 11.04 powerpc Ubuntu Ubuntu Linux 11.04 i386 Ubuntu Ubuntu Linux 11.04 ARM Ubuntu Ubuntu Linux 11.04 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 Gentoo Linux FFmpeg FFmpeg 0.9 FFmpeg FFmpeg 0.8.7 -r1 FFmpeg FFmpeg 0.8.7 FFmpeg FFmpeg 0.8.6 FFmpeg FFmpeg 0.8.5 FFmpeg FFmpeg 0.8.3 FFmpeg FFmpeg 0.7.7 FFmpeg FFmpeg 0.7.6 FFmpeg FFmpeg 0.7.4 FFmpeg FFmpeg 0.6.1 FFmpeg FFmpeg 0.4.9 20080909 FFmpeg FFmpeg 0.4.9 -pre1 FFmpeg FFmpeg 0.4.9 -0.pre1.5.1.20060 FFmpeg FFmpeg 0.4.9 FFmpeg FFmpeg 0.4.8 FFmpeg FFmpeg 0.4.7 FFmpeg FFmpeg 0.4.6 FFmpeg FFmpeg 0.8.4 FFmpeg FFmpeg 0.8.2 FFmpeg FFmpeg 0.8.1 FFmpeg FFmpeg 0.7.8 FFmpeg FFmpeg 0.7.5 FFmpeg FFmpeg 0.7.3 FFmpeg FFmpeg 0.7.2 FFmpeg FFmpeg 0.7-rc1 FFmpeg FFmpeg 0.6.3 FFmpeg FFmpeg 0.6 FFmpeg FFmpeg 0.5.4 FFmpeg FFmpeg 0.5.3 FFmpeg FFmpeg 0.5.2 FFmpeg FFmpeg 0.5 FFmpeg FFmpeg 0.49_p20060530 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:	FFmpeg FFmpeg 0.9.1

FFmpeg Multiple Remote Vulnerabilities

FFmpeg is prone to multiple remote vulnerabilities.

An attacker can exploit these issues to execute arbitrary code with the privileges of the user running the application and cause denial-of-service conditions.

FFmpeg versions prior to 0.9.1 are vulnerable.

FFmpeg Multiple Remote Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

FFmpeg Multiple Remote Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

FFmpeg Multiple Remote Vulnerabilities

References:

• FFmpeg 0.9.1 Release Notes (FFmpeg)
  
• FFmpeg Homepage (FFmpeg)