Updated ffmpeg packages fix security vulnerabilities

🗓️ 15 Jan 2016 01:52:38Reported by Gentoo FoundationType

Updated ffmpeg packages fix security vulnerabilities. The update_dimensions function in libavcodec/vp8.c in FFmpeg before 2.4.12, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service or possibly have unspecified other impact

Reporter	Title	Published	Views	Family All 280
FreeBSD	ffmpeg -- multiple vulnerabilities	5 Sep 201500:00	–	freebsd
FreeBSD	ffmpeg -- multiple vulnerabilities	20 Dec 201500:00	–	freebsd
FreeBSD	chromium -- multiple vulnerabilities	13 Oct 201500:00	–	freebsd
FreeBSD	ffmpeg -- multiple vulnerabilities	27 Nov 201500:00	–	freebsd
ArchLinux	chromium: multiple issues	14 Oct 201500:00	–	archlinux
BDU FSTEC	The vulnerability of FFmpeg’s multimedia library in Google Chrome browsers allows attackers to trigger a service failure.	29 Oct 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the FFmpeg multimedia library, which allows a hacker to trigger a service failure	14 Dec 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the FFmpeg multimedia library, which allows a hacker to trigger a service failure	14 Dec 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the FFmpeg multimedia library, which allows a intruder to trigger a service failure or cause other effects	12 Feb 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the FFmpeg multimedia library, which allows a intruder to trigger a service failure or cause other effects	12 Feb 201600:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Mageia	5	any	ffmpeg	2.4.12-1	ffmpeg-2.4.12-1.noarch.rpm

Source	Link
bugs	www.bugs.mageia.org/show_bug.cgi
git	www.git.videolan.org/
ffmpeg	www.ffmpeg.org/download.html
ffmpeg	www.ffmpeg.org/security.html

15 Jan 2016 01:52Current

8.5High risk

Vulners AI Score8.5

CVSS 27.5

CVSS 38.3

EPSS0.01459