The vulnerability of the error_resilience.c, h263dec.c, and mpeg4videodec.c components of the FFmpeg multimedia library, related to the insufficient use of the assert() function, allows a malicious actor to cause a system failure.

The vulnerability of the errorresilience.c, h263dec.c, and mpeg4videodec.c components of the FFmpeg multimedia library is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a malicious actor to cause a service failure by using a specially created AVI...

Mandriva Linux Security Advisory : ffmpeg (MDVSA-2013:079)

Updated ffmpeg packages fix security vulnerabilities : h264: Add check for invalid chromaformatidc CVE-2012-0851 h263dec: Disallow width/height changing with frame threads CVE-2011-3937 vc1dec: check that coded slice positions and interlacing match. This fixes out of array writes CVE-2012-2796...