Lucene search

K
freebsdFreeBSD6733E1BF-125F-11DE-A964-0030843D3802
HistoryJan 28, 2009 - 12:00 a.m.

ffmpeg -- 4xm processing memory corruption vulnerability

2009-01-2800:00:00
vuxml.freebsd.org
15

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.495 Medium

EPSS

Percentile

97.5%

Secunia reports:

Tobias Klein has reported a vulnerability in FFmpeg, which
potentially can be exploited by malicious people to compromise an
application using the library.
The vulnerability is caused due to a signedness error within the
β€œfourxm_read_header()” function in libavformat/4xm.c. This can be
exploited to corrupt arbitrary memory via a specially crafted 4xm
file.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchffmpeg<Β 2008.07.27_9UNKNOWN

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.495 Medium

EPSS

Percentile

97.5%