Description
Unspecified vulnerability in the decode_cell_data function in libavcodec/indeo3.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to an "out of picture write."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | ffmpeg | 7:2.4.1-1 | — |
| Debian 13 | ffmpeg | 7:2.4.1-1 | — |
| Debian 12 | ffmpeg | 7:2.4.1-1 | — |
References
- http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=ba775a54bc2136ec5da85385a923b05ee6fab159
- [oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11? mailing-list
- http://libav.org/releases/libav-0.8.4.changelog
- 55355 vdb-entry
- MDVSA-2013:079 vendor-advisory
- [oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11? mailing-list
- http://ffmpeg.org/security.html
- 50468 third-party-advisory
- 51257 third-party-advisory