SB2013120905 - Multiple vulnerabilities in ffmpeg.sourceforge.net FFmpeg

Main Vulnerability Database SB2013120905

SB2013120905 - Multiple vulnerabilities in ffmpeg.sourceforge.net FFmpeg

Published: December 9, 2013 Updated: October 12, 2021

Security Bulletin ID SB2013120905

Severity

Medium

Patch available

YES

Number of vulnerabilities 16

Exploitation vector Remote access

Highest impact Data manipulation

Breakdown by Severity

Low
Medium
High
Critical

Description

This security bulletin contains information about 16 secuirty vulnerabilities.

1) Resource management error (CVE-ID: CVE-2013-7021)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

The filter_frame function in libavfilter/vf_fps.c in FFmpeg before 2.1 does not properly ensure the availability of FIFO content, which allows remote attackers to cause a denial of service (double free) or possibly have unspecified other impact via crafted data.

2) Buffer overflow (CVE-ID: CVE-2013-7022)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

The g2m_init_buffers function in libavcodec/g2meet.c in FFmpeg before 2.1 does not properly allocate memory for tiles, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Go2Webinar data.

3) Buffer overflow (CVE-ID: CVE-2013-7023)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

The ff_combine_frame function in libavcodec/parser.c in FFmpeg before 2.1 does not properly handle certain memory-allocation errors, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted data.

4) Buffer overflow (CVE-ID: CVE-2013-7024)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

The jpeg2000_decode_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not consider the component number in certain calculations, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG2000 data.

5) Input validation error (CVE-ID: CVE-2013-7015)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

The flashsv_decode_frame function in libavcodec/flashsv.c in FFmpeg before 2.1 does not properly validate a certain height value, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Flash Screen Video data.

6) Buffer overflow (CVE-ID: CVE-2013-7016)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

The get_siz function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not ensure the expected sample separation, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG2000 data.

7) Input validation error (CVE-ID: CVE-2013-7017)

The vulnerability allows remote attackers to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can cause a denial of service (invalid pointer dereference) or possibly have unspecified other impact via crafted JPEG2000 data.

8) Buffer overflow (CVE-ID: CVE-2013-7018)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not ensure the use of valid code-block dimension values, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG2000 data.

9) Input validation error (CVE-ID: CVE-2013-7019)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

The get_cox function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not properly validate the reduction factor, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG2000 data.

10) Input validation error (CVE-ID: CVE-2013-7010)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Multiple integer signedness errors in libavcodec/dsputil.c in FFmpeg before 2.1 allow remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted data.

11) Buffer overflow (CVE-ID: CVE-2013-7011)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

The read_header function in libavcodec/ffv1dec.c in FFmpeg before 2.1 does not prevent changes to global parameters, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted FFV1 data.

12) Buffer overflow (CVE-ID: CVE-2013-7012)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

The get_siz function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not prevent attempts to use non-zero image offsets, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG2000 data.

13) Input validation error (CVE-ID: CVE-2013-7013)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

The g2m_init_buffers function in libavcodec/g2meet.c in FFmpeg before 2.1 uses an incorrect ordering of arithmetic operations, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Go2Webinar data.

14) Input validation error (CVE-ID: CVE-2013-7014)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Integer signedness error in the add_bytes_l2_c function in libavcodec/pngdsp.c in FFmpeg before 2.1 allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted PNG data.

15) Input validation error (CVE-ID: CVE-2013-7008)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

The decode_slice_header function in libavcodec/h264.c in FFmpeg before 2.1 incorrectly relies on a certain droppable field, which allows remote attackers to cause a denial of service (deadlock) or possibly have unspecified other impact via crafted H.264 data.

16) Buffer overflow (CVE-ID: CVE-2013-7009)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

The rpza_decode_stream function in libavcodec/rpza.c in FFmpeg before 2.1 does not properly maintain a pointer to pixel data, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Apple RPZA data.

Remediation

Install update from vendor's website.

References