Simon Kilvington has reported a vulnerability in FFmpeg libavcodec, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially to compromise a user's system.

The vulnerability is caused due to a boundary error in the "avcodec_default_get_buffer()" function of "utils.c" in libavcodec. This can be exploited to cause a heap-based buffer overflow when a specially-crafted 1x1 ".png" file containing a palette is read.

Solution
The vulnerability has been fixed in the CVS repositories (utils.c revision 1.162).

Provided and/or discovered by
Simon Kilvington

Changelog
Further details available in Customer Area

Original Advisory
http://article.gmane.org/gmane.comp.video.ffmpeg.devel/26558

Deep Links
Links available in Customer Area