Lucene search

GoogleOSV:DSA-2471-1

HistoryMay 13, 2012 - 12:00 a.m.

ffmpeg - several

2012-05-1300:00:00

Google

osv.dev

0.044 Low

EPSS

Percentile

92.5%

JSON

Several vulnerabilities have been discovered in FFmpeg, a multimedia
player, server and encoder. Multiple input validations in the decoders/
demuxers for Westwood Studios VQA, Apple MJPEG-B, Theora, Matroska,
Vorbis, Sony ATRAC3, DV, NSV, files could lead to the execution of
arbitrary code.

These issues were discovered by Aki Helin, Mateusz Jurczyk, Gynvael
Coldwind, and Michael Niedermayer.

For the stable distribution (squeeze), this problem has been fixed in
version 4:0.5.8-1.

For the unstable distribution (sid), this problem has been fixed in
version 6:0.8.2-1 of libav.

We recommend that you upgrade your ffmpeg packages.

CPENameOperatorVersion
ffmpegeq4:0.5.2-6
ffmpegeq4:0.5.4-1
ffmpegeq4:0.5.6-3
ffmpegeq4:0.5.5-1

Name	Operator	Version
ffmpeg	eq	4:0.5.2-6
ffmpeg	eq	4:0.5.4-1
ffmpeg	eq	4:0.5.6-3
ffmpeg	eq	4:0.5.5-1

References

www.debian.org/security/2012/dsa-2471

0.044 Low

EPSS

Percentile

92.5%

JSON

Related for OSV:DSA-2471-1