Description
The ff_MPV_frame_start function in libavcodec/mpegvideo.c in FFmpeg before 0.11 allows remote attackers to cause a denial of service (memory corruption) via unspecified vectors, related to starting "a frame outside SETUP state."
References
- [oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11? mailing-list
- 55355 vdb-entry
- [oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11? mailing-list
- http://ffmpeg.org/security.html
- http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=59a4b73531428d2f420b4dad545172c8483ced0f
- 50468 third-party-advisory