Package name
ffmpeg
Date
2014-07-09
Advisory ID
MDVSA-2014:129
Affected versions
MBS1 x86_64

Problem description

Multiple vulnerabilities has been discovered and corrected in ffmpeg:

Multiple unspecified vulnerabilities in libavcodec/wmalosslessdec.c in
FFmpeg before 0.11 have unknown impact and attack vectors related to
(1) size of mclms arrays, (2) a get_bits(0) in decode_ac_filter, and
(3) too many bits in decode_channel_residues(). (CVE-2012-2795).

libavcodec/wmalosslessdec.c in FFmpeg before 2.1.4 uses an incorrect
data-structure size for certain coefficients, which allows remote
attackers to cause a denial of service (memory corruption) or possibly
have unspecified other impact via crafted WMA data (CVE-2014-2098).

The msrle_decode_frame function in libavcodec/msrle.c in FFmpeg before
2.1.4 does not properly calculate line sizes, which allows remote
attackers to cause a denial of service (out-of-bounds array access)
or possibly have unspecified other impact via crafted Microsoft RLE
video data (CVE-2014-2099).

The mpegts_write_pmt function in the MPEG2 transport stream (aka DVB)
muxer (libavformat/mpegtsenc.c) in FFmpeg, possibly 2.1 and earlier,
allows remote attackers to have unspecified impact and vectors,
which trigger an out-of-bounds write (CVE-2014-2263).

A use-after-free vulnerability in FFmpeg before 1.1.9 involving seek
operations on video data could allow remote attackers to cause a
denial of service (CVE-2012-5150).

An integer overflow can occur when processing any variant of a literal
run in the av_lzo1x_decode function (CVE-2014-4609, CVE-2014-4610).

The updated packages have been upgraded to the 0.10.14 version which
is not vulnerable to these issues.

Updated packages

MBS1 x86_64

 b51959a114b898f61f4e9f2fa227164b  mbs1/x86_64/ffmpeg-0.10.14-1.mbs1.x86_64.rpm
 a01603d6bd7ce8062078477657d5f3f6  mbs1/x86_64/lib64avcodec53-0.10.14-1.mbs1.x86_64.rpm
 afbd4762fda0acee6e3c82077bafe7ea  mbs1/x86_64/lib64avfilter2-0.10.14-1.mbs1.x86_64.rpm
 f667967cd563412ceb5e59c89f6b4854  mbs1/x86_64/lib64avformat53-0.10.14-1.mbs1.x86_64.rpm
 fe233107398c0188cc562271c69fa385  mbs1/x86_64/lib64avutil51-0.10.14-1.mbs1.x86_64.rpm
 6ba5fccb492c998cd36fd61819e4da92  mbs1/x86_64/lib64ffmpeg-devel-0.10.14-1.mbs1.x86_64.rpm
 ccb2f3026cc84e27a464da14192a992b  mbs1/x86_64/lib64ffmpeg-static-devel-0.10.14-1.mbs1.x86_64.rpm
 24e803e02ce1abccc513c98f2aa9ed53  mbs1/x86_64/lib64postproc52-0.10.14-1.mbs1.x86_64.rpm
 f9d57b25aa155019199ba095a74d4e32  mbs1/x86_64/lib64swresample0-0.10.14-1.mbs1.x86_64.rpm
 6e50dd84e0667eca277d083ddbca0162  mbs1/x86_64/lib64swscaler2-0.10.14-1.mbs1.x86_64.rpm 
 de39ad82d3ac7982d5959714560ada9d  mbs1/SRPMS/ffmpeg-0.10.14-1.mbs1.src.rpm

References