CVE-2011-4579

Priority
Description
The svq1_decode_frame function in the SVQ1 decoder (svq1dec.c) in
libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before
0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x
before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a
denial of service (memory corruption) via a crafted SVQ1 stream, related to
"dimensions changed."
Notes
mdeslaurffmpeg-extra in multiverse needs to have matching version
libav-extra is built with tarball produced by libav package
This fixes NGS00148
as of 2011-12-22, libav has no equivalent patch
see thread here: http://thread.gmane.org/gmane.comp.video.libav.devel/15130
Package
Upstream:needs-triage
Package
Upstream:needs-triage
More Information

Updated: 2019-12-05 20:58:13 UTC (commit 0aa5e7c87c8b55d2ec5c7f4ca1179cf75de91961)