REDHAT-BUG-635775
First published: Mon Sep 20 2010(Updated: )
oCERT reported a vulnerability that affects the flic video codec support in ffmpeg. Quoting: "The MPlayer package [1] is vulnerable to an arbitrary offset dereference vulnerability, which could be exploited by malicious remote attacker. The vulnerability is caused by the MPlayer's flic codec (flicvideo.c) on 8 bits per pixel videos because the codec does not check received values. This could be exploited jumping to arbitrary code by opening a specially crafted file." They were particularly concerned about the ffmpeg inclusion in mplayer. The affected file (flicvideo.c) is also present in libextractor as provided by Fedora 12. It looks as though the only thing using libextractor in Fedora is doodle (local search program, like Spotlight). This would mean a user would have to download a specially crafted file and store it locally, and be using doodle to index files. I don't know whether or not doodle would be problematic here, i.e. if it's just reading metadata it might not cause any problems at all. Later versions of libextractor have removed the embedded ffmpeg sources.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| FFmpeg | ||
| DVD Player | ||
| libextractor | >=12 | |
| Doodle |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=448516&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=448516&action=edit
- http://www.ocert.org/advisories/ocert-2010-004.html
- http://git.ffmpeg.org/?p=ffmpeg;a=commitdiff;h=16c592155f117ccd7b86006c45aacc692a81c23b
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=638265
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=635775#c6
- https://bugzilla.redhat.com/show_bug.cgi?id=635775
Frequently Asked Questions
What is the severity of REDHAT-BUG-635775?
The vulnerability in REDHAT-BUG-635775 is considered critical as it allows for arbitrary offset dereference, potentially leading to exploitation by remote attackers.
How do I fix REDHAT-BUG-635775?
To fix REDHAT-BUG-635775, users should update the affected versions of FFmpeg, MPlayer, and libextractor to the latest patched versions.
What products are affected by REDHAT-BUG-635775?
The products affected by REDHAT-BUG-635775 include FFmpeg, MPlayer, and libextractor versions from 12 onwards.
Can REDHAT-BUG-635775 be exploited remotely?
Yes, REDHAT-BUG-635775 can be exploited by a malicious remote attacker using the vulnerable flic video codec support.
What does the vulnerability in REDHAT-BUG-635775 affect?
The vulnerability in REDHAT-BUG-635775 affects the flic video codec support in the MPlayer package.
- collector/redhat-bugzilla
- alias/CVE-2010-3429
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/severity
- agent/references
- agent/description
- agent/event
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- vendor/ffmpeg
- canonical/ffmpeg
- vendor/mplayer
- canonical/dvd player
- vendor/libextractor
- canonical/libextractor
- vendor/doodle
- canonical/doodle