LWN.net Logo

ffmpeg: multiple code-execution vulnerabilities

Package(s):ffmpeg CVE #(s):CVE-2011-4351 CVE-2011-4353 CVE-2011-4364 CVE-2011-4579
Created:January 4, 2012 Updated:August 30, 2012
Description: Multiple vulnerabilities have been found in the ffmpeg audio application.

  • CVE-2011-4351: a buffer overflow in the QDM2 decoder.

  • CVE-2011-4353: out-of-bounds reads in vp5_parse_coeff() and vp6_parse_coeff().

  • CVE-2011-4364: obscure vulnerability in vmd_decode() disclosed in this paper [PDF]

  • CVE-2011-4579: A thoroughly mysterious vulnerability as of this writing.
Alerts:
Debian DSA-2378-1 2012-01-03
Ubuntu USN-1320-1 2012-01-05
Ubuntu USN-1333-1 2012-01-17
Mandriva MDVSA-2012:074 2012-05-14
Mandriva MDVSA-2012:075 2012-05-15
Mandriva MDVSA-2012:076 2012-05-15
Mandriva MDVSA-2012:074-1 2012-08-30
Mandriva MDVSA-2012:148 2012-08-30

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds