Mandriva Linux Security Advisory : ffmpeg (MDVSA-2012:075)

Multiple vulnerabilities has been found and corrected in ffmpeg : The Matroska format decoder in FFmpeg does not properly allocate memory, which allows remote attackers to execute arbitrary code via a crafted file CVE-2011-3362, CVE-2011-3504. cavsdec.c in libavcodec in FFmpeg allows remote...

CVE-2011-3974

FFmpeg (libavcodec) CVE-2011-3974: Integer signedness error in cavsdec.c decode_residual_inter can trigger DoS via invalid CAVS bitstreams. Affected: FFmpeg before 0.7.4 and 0.8.x before 0.8.3. Remediation: Mandriva/GLSA references indicate upgrading FFmpeg to a version in the 0.7.x line (e.g., 0...