FFmpeg 'libavcodec/error_resilience.c' NULL Pointer Dereference Denial of Service Vulnerability
BID:63941
Info
FFmpeg 'libavcodec/error_resilience.c' NULL Pointer Dereference Denial of Service Vulnerability
| Bugtraq ID: | 63941 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2013-0860 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 23 2013 12:00AM |
| Updated: | Jul 05 2016 09:43PM |
| Credit: | Mateusz "j00ru" Jurczyk and Gynvael Coldwind |
| Vulnerable: |
Gentoo Linux FFmpeg FFmpeg 0.10.1 FFmpeg FFmpeg 0.9.1 FFmpeg FFmpeg 0.9 FFmpeg FFmpeg 0.8.11 FFmpeg FFmpeg 0.8.7 FFmpeg FFmpeg 0.8.6 FFmpeg FFmpeg 0.8.5 FFmpeg FFmpeg 0.8.3 FFmpeg FFmpeg 0.7.7 FFmpeg FFmpeg 0.7.6 FFmpeg FFmpeg 0.7.4 FFmpeg FFmpeg 0.6.1 FFmpeg FFmpeg 0.4.9 FFmpeg FFmpeg 0.4.8 FFmpeg FFmpeg 0.4.7 FFmpeg FFmpeg 0.4.6 FFmpeg FFmpeg 0.8.4 FFmpeg FFmpeg 0.8.2 FFmpeg FFmpeg 0.8.1 FFmpeg FFmpeg 0.7.8 FFmpeg FFmpeg 0.7.5 FFmpeg FFmpeg 0.7.3 FFmpeg FFmpeg 0.7.2 FFmpeg FFmpeg 0.7.12 FFmpeg FFmpeg 0.7-rc1 FFmpeg FFmpeg 0.6.3 FFmpeg FFmpeg 0.6 FFmpeg FFmpeg 0.5.4 FFmpeg FFmpeg 0.5.3 FFmpeg FFmpeg 0.5.2 FFmpeg FFmpeg 0.5 FFmpeg FFmpeg 0.10 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: | |
Discussion
FFmpeg 'libavcodec/error_resilience.c' NULL Pointer Dereference Denial of Service Vulnerability
FFmpeg is prone to a denial-of-service vulnerability due to a NULL-pointer dereference condition.
An attacker can exploit this issue to cause the application using the affected library to crash, denying service to legitimate users.
Versions prior to FFmpeg 1.0.4 and FFmpeg versions 1.1.x versions prior to 1.1.1 are vulnerable.
FFmpeg is prone to a denial-of-service vulnerability due to a NULL-pointer dereference condition.
An attacker can exploit this issue to cause the application using the affected library to crash, denying service to legitimate users.
Versions prior to FFmpeg 1.0.4 and FFmpeg versions 1.1.x versions prior to 1.1.1 are vulnerable.
Solution / Fix
FFmpeg 'libavcodec/error_resilience.c' NULL Pointer Dereference Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Mandriva Business Server 1 X86 64
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Mandriva Business Server 1 X86 64
-
Mandriva ffmpeg-0.10.15-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64avcodec53-0.10.15-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64avfilter2-0.10.15-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64avformat53-0.10.15-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64avutil51-0.10.15-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64ffmpeg-devel-0.10.15-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64ffmpeg-static-devel-0.10.15-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64postproc52-0.10.15-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64swresample0-0.10.15-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64swscaler2-0.10.15-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/
References
FFmpeg 'libavcodec/error_resilience.c' NULL Pointer Dereference Denial of Service Vulnerability
References:
References: