Description
Unspecified vulnerability in libavcodec/indeo3.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.5 has unknown impact and attack vectors, related to "reallocation code" and the luma height and width.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | ffmpeg | 7:2.4.1-1 | — |
| Debian 13 | ffmpeg | 7:2.4.1-1 | — |
| Debian 12 | ffmpeg | 7:2.4.1-1 | — |
References
- [oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11? mailing-list
- http://libav.org/releases/libav-0.8.5.changelog
- http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=4a80ebe491609e04110a1dd540a0ca79d3be3d04
- 55355 vdb-entry
- [oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11? mailing-list
- http://ffmpeg.org/security.html
- USN-1705-1 vendor-advisory
- 50468 third-party-advisory