FFmpeg 2.0 lag_decode_frame memory corruption

A vulnerability was found in FFmpeg 2.0. It has been rated as critical. Affected by this issue is the function lag_decode_frame. The manipulation leads to memory corruption. Using CWE to declare the problem leads to CWE-119. The issue has been introduced in 07/11/2013. The weakness was disclosed 02/06/2014 as lagarith: reallocate rgb_planes when needed as GIT Commit (GIT Repository). The advisory is available at git.videolan.org. This vulnerability is handled as CVE-2014-125024. The attack may be launched remotely. Technical details are available. There is no exploit available. The structure of the vulnerability defines a possible price range of USD $0-$5k at the moment. The vulnerability was handled as a non-public zero-day exploit for at least 210 days. As 0-day the estimated underground price was around $0-$5k. The bugfix is ready for download at git.videolan.org. It is recommended to apply a patch to fix this issue. A possible mitigation has been published immediately after the disclosure of the vulnerability. The vulnerability is also documented other vulnerability databases: X-Force (91082) and Secunia (SA56838).

Field02/14/2014 09:1804/16/2019 11:3606/18/2022 08:28
nameFFmpegFFmpegFFmpeg
version2.02.02.0
functionlag_decode_framelag_decode_framelag_decode_frame
introductiondate137350080013735008001373500800
risk222
cvss2_vuldb_basescore6.86.86.8
cvss2_vuldb_tempscore5.05.05.0
cvss2_vuldb_avNNN
cvss2_vuldb_acMMM
cvss2_vuldb_auNNN
cvss2_vuldb_ciPPP
cvss2_vuldb_iiPPP
cvss2_vuldb_aiPPP
cvss3_meta_basescore7.37.37.3
cvss3_meta_tempscore6.46.46.4
cvss3_vuldb_basescore7.37.37.3
cvss3_vuldb_tempscore6.46.46.4
date1391644800 (02/06/2014)1391644800 (02/06/2014)1391644800 (02/06/2014)
locationGIT RepositoryGIT RepositoryGIT Repository
typeGIT CommitGIT CommitGIT Commit
urlhttp://git.videolan.org/?p=ffmpeg.git;a=commit;h=4c3e1956eehttp://git.videolan.org/?p=ffmpeg.git;a=commit;h=4c3e1956eehttp://git.videolan.org/?p=ffmpeg.git;a=commit;h=4c3e1956ee
identifierlagarith: reallocate rgb_planes when neededlagarith: reallocate rgb_planes when neededlagarith: reallocate rgb_planes when needed
price_0day$0-$5k$0-$5k$0-$5k
namePatchPatchPatch
date1391644800 (02/06/2014)1391644800 (02/06/2014)1391644800 (02/06/2014)
patch_urlhttp://git.videolan.org/?p=ffmpeg.git;a=commit;h=4c3e1956eehttp://git.videolan.org/?p=ffmpeg.git;a=commit;h=4c3e1956eehttp://git.videolan.org/?p=ffmpeg.git;a=commit;h=4c3e1956ee
xforce910829108291082
seealso12293 12294 12295 12296 12297 12298 12299 12300 12301 1230312293 12294 12295 12296 12297 12298 12299 12300 12301 1230312293 12294 12295 12296 12297 12298 12299 12300 12301 12303
cvss3_vuldb_acLLL
cvss3_vuldb_uiNNN
cvss2_vuldb_eUUU
cvss2_vuldb_rlOFOFOF
cvss2_vuldb_rcCCC
cvss3_vuldb_eUUU
cvss3_vuldb_rlOOO
cvss3_vuldb_rcCCC
0day_days210210210
cvss3_vuldb_avNNN
cvss3_vuldb_prNNN
cvss3_vuldb_sUUU
cvss3_vuldb_cLLL
cvss3_vuldb_iLLL
cvss3_vuldb_aLLL
typeMultimedia Processing SoftwareMultimedia Processing Software
secunia5683856838
secunia_titleFFmpeg Multiple VulnerabilitiesFFmpeg Multiple Vulnerabilities
secunia_riskModerately CriticalModerately CriticalModerately Critical
xforce_titleFFmpeg lag_decode_frame() code executionFFmpeg lag_decode_frame() code execution
xforce_identifierffmpeg-lagdecodeframe-code-execffmpeg-lagdecodeframe-code-exec
xforce_riskMedium RiskMedium RiskMedium Risk
cwe0119 (memory corruption)119 (memory corruption)
cveCVE-2014-125024
responsibleVulDB

◂ PreviousOverviewNext ▸

Do you need the next level of professionalism?

Upgrade your account now!