Some vulnerabilities have been reported in FFmpeg, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise an application using the library.

1) A boundary error within the DV decoder can be exploited to cause an out-of-bounds read via specially crafted media files.

2) An NULL-pointer dereference error within the DV decoder can be exploited to cause a crash via specially crafted media files.

3) A double-free error within the "vp3_update_thread_context()" function (libavcodec/vp3.c) can be exploited via specially crafted media files.

4) An error within the "codec_get_buffer()" function (ffmpeg.c) can be exploited via specially crafted media files.

5) An error within the "ff_h263_decode_frame()" function (libavformat/nsvdec.c) can be exploited via specially crafted media files.

6) A boundary error within the "nsv_read_chunk()" function (libavformat/nsvdec.c) can be exploited to cause an out-of-bounds write via specially crafted media files.

7) An error within the "decode_mb()" function (libavcodec/error_resilience.c) can be exploited to cause an out-of-bounds write via specially crafted media files.

8) An error within the "smacker_decode_header_tree()" function (libavcodec/smacker.c) can be exploited via specially crafted media files.

9) An error within the "decode_frame()" function (libavcodec/kgv1dec.c) can be exploited via specially crafted media files.

10) An error within the H264 decoder can be exploited to cause an infinite loop via specially crafted media files.

11) An error within the "read_offs()" function (libavcodec/mjpegbdec.c) can be exploited via specially crafted media files.

12) An error within the "dirac_unpack_idwt_params()" function (libavcodec/diracdec.c) can be exploited via specially crafted media files.

13) An error within the "dirac_decode_data_unit()" function (libavcodec/diracdec.c) can be exploited via specially crafted media files.

14) An error within the "dpcm_decode_frame()" function (libavcodec/dpcm.c) can be exploited via specially crafted media files.

15) An error within the "decode_init()" function (libavcodec/kmvc.c) can be exploited via specially crafted media files.

16) An error within the "rv20_decode_picture_header()" function (libavcodec/rv10.c) can be exploited to cause a crash via specially crafted Matroska files.

17) A NULL-pointer dereference error within the "decode_mb_info()" function (libavcodec/indeo5.c) can be exploited to cause a crash via specially crafted media files.

Solution
Update to version 0.10.

Provided and/or discovered by
The vendor credits:
1-15) Mateusz "j00ru" Jurczyk and Gynvael Coldwind
16, 17) John Villamil

Original Advisory
http://ffmpeg.org/security.html

Deep Links
Links available to Secunia VIM customers