FFmpeg and Libav Multiple Remote Security Vulnerabilities

Bugtraq ID:	62749
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Sep 29 2013 12:00AM
Updated:	Sep 29 2013 12:00AM
Credit:	Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Vulnerable:	Libav Libav 9.9 FFmpeg FFmpeg 2.0.1 FFmpeg FFmpeg 2.0
Not Vulnerable:

FFmpeg and Libav Multiple Remote Security Vulnerabilities

FFmpeg and Libav are prone to multiple remote security vulnerabilities.

An attacker can exploit these issues to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions.

FFmpeg and Libav Multiple Remote Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

FFmpeg and Libav Multiple Remote Security Vulnerabilities

References:

• alac: Do bounds checking of lpc_order read from the bitstream (Martin Storsjö)
  
• avidec: Make sure a packet is large enough before reading its data (Martin Storsjö)
  
• bfi: Avoid divisions by zero (Martin Storsjö)
  
• FFmpeg Homepage (FFmpeg)
  
• mvi: Add sanity checking for the audio frame size (Martin Storsjö)
  
• pcx: Check the packet size before assuming it fits a palette (Martin Storsjö)
  
• pcx: Consume the whole packet if giving up due to missing palette (Martin Storsjö)
  
• pngdec: Stop trying to decode once inflate returns Z_STREAM_END (Martin Storsjö)
  
• riffdec: Add sanity checks for the sample rate (Martin Storsjö)
  
• vqf: Make sure sample_rate is set to a valid value (Martin Storsjö)
  
• xwma: Avoid division by zero (Martin Storsjö)
  
• xxan: Disallow odd width (Martin Storsjö)