Updated avidemux packages fix security vulnerabilities

🗓️ 18 May 2015 19:08:05Reported by Gentoo FoundationType

Updated avidemux packages fix security vulnerabilities: mjpeg_decode_app function in libavcodec/mjpegdec.c allows denial of service via LJIF tags, decode_ihdr_chunk function in libavcodec/pngdec.c allows denial of service via IDAT before an IHDR in a PNG file, vmd_decode function in libavcodec/vmdvideo.c allows denial of service via crafted Sierra VMD video data, libavcodec/utvideodec.c allows denial of service via crafted Ut Video data, an attacker can force a read at an invalid address in mjpegdec.c, ff_h264_free_tables function in libavcodec/h264.c allows denial of service via crafted H.264 data in an MP4 file

Reporter	Title	Published	Views	Family All 117
FreeBSD	avidemux26 -- multiple vulnerabilities in bundled FFmpeg	18 May 201500:00	–	freebsd
FreeBSD	Several vulnerabilities in libav	24 Mar 201500:00	–	freebsd
FreeBSD	ffmpeg -- multiple vulnerabilities	12 Mar 201500:00	–	freebsd
FreeBSD	ffmpeg -- use-after-free	19 Dec 201400:00	–	freebsd
BDU FSTEC	The vulnerability of the FFmpeg multimedia library, which allows a hacker to trigger a service failure	15 Dec 201500:00	–	bdu_fstec
CNVD	FFmpeg 'libavcodec/utvideodec.c' Denial of Service Vulnerability	22 Jan 201500:00	–	cnvd
CNVD	FFmpeg 'vmd_decode' function denial of service vulnerability	22 Jan 201500:00	–	cnvd
CNVD	FFmpeg2 Out-of-Bounds Denial of Service Vulnerability	21 Feb 201500:00	–	cnvd
CNVD	FFmpeg Memory Misreference Vulnerability	27 Apr 201500:00	–	cnvd
CVE	CVE-2014-9316	9 Dec 201422:52	–	cve

OS	OS Version	Architecture	Package	Package Version	Filename
Mageia	4	any	avidemux	2.6.6-2.3	avidemux-2.6.6-2.3.noarch.rpm

Source	Link
bugs	www.bugs.mageia.org/show_bug.cgi
vigilance	www.vigilance.fr/vulnerability/FFmpeg-unreachable-memory-reading-via-mjpegdec-c-16213
git	www.git.videolan.org/
ffmpeg	www.ffmpeg.org/olddownload.html
ffmpeg	www.ffmpeg.org/security.html

18 May 2015 19:08Current

8.4High risk

Vulners AI Score8.4

CVSS 27.5

EPSS0.01017