Input validation error in FFmpeg - CVE-2014-9676

Vulnerability details

The vulnerability allows remote attackers to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can cause a denial of service ("invalid memory handler") and possibly execute arbitrary code via a crafted video that triggers a use after free.

Affected software

How to mitigate CVE-2014-9676

External References

• http://seclists.org/oss-sec/2015/q1/38
• https://security.gentoo.org/glsa/201606-09

Related Security Bulletins

• Input validation error in FFmpeg
• Gentoo update for FFmpeg