CVE-2014-125023: FFmpeg Truemotion1 truemotion1_decode_header memory corruption

Published Jun 19, 2022

Updated

A vulnerability was found in FFmpeg 2.0. It has been declared as problematic. Affected by this vulnerability is the function truemotion1decodeheader of the component Truemotion1 Handler. The manipulation leads to memory corruption. The attack can be launched remotely. It is recommended to apply a patch to fix this issue.

Affected Software

1 affected component

FFmpeg FFmpeg=2.0

Remediation

Patch Available

http://git.videolan.org/?p=ffmpeg.git;a=commit;h=2240e2078d

Event History

Jun 19, 2022

CVE Published

via MITRE·06:10 AM

Data Sourced

via MITRE·06:10 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2014-125023?

The severity of CVE-2014-125023 is medium with a severity value of 5.5.

How does CVE-2014-125023 affect FFmpeg 2.0?

CVE-2014-125023 affects FFmpeg 2.0 by exploiting a vulnerability in the function truemotion1_decode_header of the Truemotion1 Handler component, leading to memory corruption.

Can the attack that exploits CVE-2014-125023 be launched remotely?

Yes, the attack that exploits CVE-2014-125023 can be launched remotely.

Is there a fix available for CVE-2014-125023?

Yes, it is recommended to apply a fix to address the vulnerability in CVE-2014-125023.

What is the Common Weakness Enumeration (CWE) ID of CVE-2014-125023?

The Common Weakness Enumeration (CWE) ID of CVE-2014-125023 is CWE-787 and CWE-119.