MDVSA-2011:062

Executive Summary

Informations
Name	MDVSA-2011:062	First vendor Publication	2011-04-01
Vendor	Mandriva	Last vendor Modification	2011-04-01
Severity (Vendor)	N/A	Revision	N/A

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score	10	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Low
Cvss Expoit Score	10	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Multiple vulnerabilities has been identified and fixed in ffmpeg:

FFmpeg 0.5 allows remote attackers to cause a denial of service (hang) via a crafted file that triggers an infinite loop. (CVE-2009-4636)

flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a crafted flic file, related to an arbitrary offset dereference vulnerability. (CVE-2010-3429)

libavcodec/vorbis_dec.c in the Vorbis decoder in FFmpeg 0.6.1 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted .ogg file, related to the vorbis_floor0_decode function. (CVE-2010-4704)

Fix heap corruption crashes (CVE-2011-0722)

Fix invalid reads in VC-1 decoding (CVE-2011-0723)

And several additional vulnerabilites originally discovered by Google Chrome developers were also fixed with this advisory.

The updated packages have been patched to correct these issues.

Original Source

Url : http://www.mandriva.com/security/advisories?name=MDVSA-2011:062

CWE : Common Weakness Enumeration

id	Name
CWE-94	Failure to Control Generation of Code ('Code Injection')
CWE-399	Resource Management Errors
CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer
CWE-20	Improper Input Validation

CPE : Common Platform Enumeration

Type	Description	Count
Application	Ffmpeg Ffmpeg cpe:/a:ffmpeg:ffmpeg:0.6.1 cpe:/a:ffmpeg:ffmpeg:0.6 cpe:/a:ffmpeg:ffmpeg:0.5.4 cpe:/a:ffmpeg:ffmpeg:0.5.3 cpe:/a:ffmpeg:ffmpeg:0.5.2 cpe:/a:ffmpeg:ffmpeg:0.5.1 cpe:/a:ffmpeg:ffmpeg:0.5 cpe:/a:ffmpeg:ffmpeg:0.4.9:pre1 cpe:/a:ffmpeg:ffmpeg:0.4.8 cpe:/a:ffmpeg:ffmpeg:0.4.7 cpe:/a:ffmpeg:ffmpeg:0.4.6 cpe:/a:ffmpeg:ffmpeg:0.4.5 cpe:/a:ffmpeg:ffmpeg:0.4.4 cpe:/a:ffmpeg:ffmpeg:0.4.3 cpe:/a:ffmpeg:ffmpeg:0.4.2 cpe:/a:ffmpeg:ffmpeg:0.4.0 cpe:/a:ffmpeg:ffmpeg:0.3.4 cpe:/a:ffmpeg:ffmpeg:0.3.3 cpe:/a:ffmpeg:ffmpeg:0.3.2 cpe:/a:ffmpeg:ffmpeg:0.3.1 cpe:/a:ffmpeg:ffmpeg:0.3	21
Application	Ffmpeg Libavcodec cpe:/a:ffmpeg:libavcodec	1
Application	Mplayer Mplayer cpe:/a:mplayer:mplayer	1
Application	Mplayerhq Mplayer cpe:/a:mplayerhq:mplayer:1.0:rc2 cpe:/a:mplayerhq:mplayer:1.0:pre5try2 cpe:/a:mplayerhq:mplayer:1.0:rc3 cpe:/a:mplayerhq:mplayer:1.0:pre7 cpe:/a:mplayerhq:mplayer:1.0:rc1 cpe:/a:mplayerhq:mplayer:1.0:pre3try2 cpe:/a:mplayerhq:mplayer:1.0:pre8 cpe:/a:mplayerhq:mplayer:1.0:pre4 cpe:/a:mplayerhq:mplayer:1.0:pre6 cpe:/a:mplayerhq:mplayer:1.0:pre2 cpe:/a:mplayerhq:mplayer:1.0:pre1 cpe:/a:mplayerhq:mplayer:1.0:pre6a cpe:/a:mplayerhq:mplayer:1.0:pre7try2 cpe:/a:mplayerhq:mplayer:1.0:pre5 cpe:/a:mplayerhq:mplayer:1.0:pre3 cpe:/a:mplayerhq:mplayer:1.0 cpe:/a:mplayerhq:mplayer:0.93 cpe:/a:mplayerhq:mplayer:0.92.1 cpe:/a:mplayerhq:mplayer:0.92 cpe:/a:mplayerhq:mplayer:0.91 cpe:/a:mplayerhq:mplayer:0.90:pre4 cpe:/a:mplayerhq:mplayer:0.90:pre5 cpe:/a:mplayerhq:mplayer:0.90:rc3-pre3 cpe:/a:mplayerhq:mplayer:0.90:rc3 cpe:/a:mplayerhq:mplayer:0.90 cpe:/a:mplayerhq:mplayer:0.90:pre6 cpe:/a:mplayerhq:mplayer:0.90:rc3-pre2 cpe:/a:mplayerhq:mplayer:0.90:rc5 cpe:/a:mplayerhq:mplayer:0.90:pre3 cpe:/a:mplayerhq:mplayer:0.90:pre7 cpe:/a:mplayerhq:mplayer:0.90:pre10 cpe:/a:mplayerhq:mplayer:0.90:rc4 cpe:/a:mplayerhq:mplayer:0.90:rc1 cpe:/a:mplayerhq:mplayer:0.90:rc2 cpe:/a:mplayerhq:mplayer:0.90:pre9 cpe:/a:mplayerhq:mplayer:0.90:pre2 cpe:/a:mplayerhq:mplayer:0.90:pre1 cpe:/a:mplayerhq:mplayer:0.90:rc3-pre1 cpe:/a:mplayerhq:mplayer:0.90:pre8 cpe:/a:mplayerhq:mplayer:0.60 cpe:/a:mplayerhq:mplayer:0.60:pre2 cpe:/a:mplayerhq:mplayer:0.60:pre1 cpe:/a:mplayerhq:mplayer:0.50:pre2 cpe:/a:mplayerhq:mplayer:0.50 cpe:/a:mplayerhq:mplayer:0.50:pre1 cpe:/a:mplayerhq:mplayer:0.50:pre3 cpe:/a:mplayerhq:mplayer:0.18:pre1 cpe:/a:mplayerhq:mplayer:0.18:pre5 cpe:/a:mplayerhq:mplayer:0.18:pre2 cpe:/a:mplayerhq:mplayer:0.18:pre4 cpe:/a:mplayerhq:mplayer:0.18:pre3 cpe:/a:mplayerhq:mplayer:0.17a_idegcounter cpe:/a:mplayerhq:mplayer:0.17_idegcounter cpe:/a:mplayerhq:mplayer:0.11:pre2 cpe:/a:mplayerhq:mplayer:0.11:pre15 cpe:/a:mplayerhq:mplayer:0.11:pre22 cpe:/a:mplayerhq:mplayer:0.11:pre17 cpe:/a:mplayerhq:mplayer:0.11:pre14 cpe:/a:mplayerhq:mplayer:0.11:pre4 cpe:/a:mplayerhq:mplayer:0.11:pre21 cpe:/a:mplayerhq:mplayer:0.11:pre7 cpe:/a:mplayerhq:mplayer:0.11:pre6 cpe:/a:mplayerhq:mplayer:0.11:pre8 cpe:/a:mplayerhq:mplayer:0.11:pre16 cpe:/a:mplayerhq:mplayer:0.11:pre19 cpe:/a:mplayerhq:mplayer:0.11:pre13 cpe:/a:mplayerhq:mplayer:0.11:pre11 cpe:/a:mplayerhq:mplayer:0.11:pre3 cpe:/a:mplayerhq:mplayer:0.11:pre24 cpe:/a:mplayerhq:mplayer:0.11:pre9 cpe:/a:mplayerhq:mplayer:0.11:pre20 cpe:/a:mplayerhq:mplayer:0.11:pre23 cpe:/a:mplayerhq:mplayer:0.11:pre5 cpe:/a:mplayerhq:mplayer:0.11:pre18 cpe:/a:mplayerhq:mplayer:0.11:pre10 cpe:/a:mplayerhq:mplayer:0.11:pre12 cpe:/a:mplayerhq:mplayer:0.10:pre7 cpe:/a:mplayerhq:mplayer:0.10:pre5 cpe:/a:mplayerhq:mplayer:0.10:pre3 cpe:/a:mplayerhq:mplayer:0.10:pre4 cpe:/a:mplayerhq:mplayer:0.10 cpe:/a:mplayerhq:mplayer:0.10:pre2 cpe:/a:mplayerhq:mplayer:0.10:pre6 cpe:/a:mplayerhq:mplayer:0.10:pre1 cpe:/a:mplayerhq:mplayer:0.09 cpe:/a:mplayerhq:mplayer:0.09:pre3 cpe:/a:mplayerhq:mplayer:0.08 cpe:/a:mplayerhq:mplayer:0.07 cpe:/a:mplayerhq:mplayer:0.06 cpe:/a:mplayerhq:mplayer:0.05 cpe:/a:mplayerhq:mplayer:0.02 cpe:/a:mplayerhq:mplayer:0.01 cpe:/a:mplayerhq:mplayer	93
Os	Mandriva Corporate Server cpe:/o:mandriva:corporate_server:4.0	1
Os	Mandriva Enterprise Server cpe:/o:mandriva:enterprise_server:5	1
Os	Mandriva Linux cpe:/o:mandriva:linux:2010.1 cpe:/o:mandriva:linux:2010.0 cpe:/o:mandriva:linux:2009.0	3

Open Source Vulnerability Database (OSVDB)

id	Description
74020	FFmpeg on Mandriva Multiple Unspecified Issues
72578	FFmpeg RealMedia File Handling Memory Corruption DoS
72574	FFmpeg Malformed VC-1 File Handling DoS
70650	FFmpeg Vorbis Decoder libavcodec/vorbis_dec.c vorbis_floor0_decode Function O...
68269	FFmpeg libavcodec/flicvideo.c Multiple Function Array Indexing Memory Corruption
58508	FFmpeg Unspecified Crafted File Infinite Loop DoS