FFmpeg and Libav CVE-2014-8548 Out of Bounds Denial of Service Vulnerability

Bugtraq ID:	70888
Class:	Unknown
CVE:	CVE-2014-8548
Remote:	Yes
Local:	No
Published:	Oct 03 2014 12:00AM
Updated:	Jul 05 2016 09:43PM
Credit:	Mateusz "j00ru" Jurczyk, and Gynvael Coldwind
Vulnerable:	Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Libav Libav 0 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

FFmpeg and Libav CVE-2014-8548 Out of Bounds Denial of Service Vulnerability

FFmpeg and Libav are prone to a denial-of-service vulnerability.

An attacker can exploit this issue to crash the affected application, denying service to legitimate users. Due to the nature of this issue, code-execution may be possible; however this has not been confirmed.

FFmpeg and Libav CVE-2014-8548 Out of Bounds Denial of Service Vulnerability

References:

• avcodec/smc: fix off by 1 error (FFmpeg)
  
• avcodec/smc: fix off by 1 error (FFmpeg)
  
• FFmpeg Homepage (FFmpeg)
  
• FFmpeg Security (FFmpeg)
  
• Libav Homepage (Libav)