FFmpeg 2.0 Truemotion1 truemotion1_decode_header memory corruption
CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
---|---|---|
4.6 | $0-$5k | 0.03 |
A vulnerability was found in FFmpeg 2.0 (Multimedia Processing Software). It has been declared as problematic. Affected by this vulnerability is the function truemotion1_decode_header
of the component Truemotion1 Handler. The manipulation with an unknown input leads to a memory corruption vulnerability. The CWE definition for the vulnerability is CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. As an impact it is known to affect availability.
The issue has been introduced in 07/11/2013. The weakness was released 02/06/2014 as truemotion1: check the header size as confirmed git commit (GIT Repository). The advisory is shared at git.videolan.org. This vulnerability is known as CVE-2014-125023. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Technical details are known, but no exploit is available.
The vulnerability was handled as a non-public zero-day exploit for at least 210 days. During that time the estimated underground price was around $0-$5k.
Applying a patch is able to eliminate this problem. The bugfix is ready for download at git.videolan.org. A possible mitigation has been published immediately after the disclosure of the vulnerability.
The vulnerability is also documented in the databases at X-Force (91081) and Secunia (SA56838†). Entries connected to this vulnerability are available at VDB-12293, VDB-12294, VDB-12295 and VDB-12296.
Product
Type
Name
Version
License
CPE 2.3
CPE 2.2
CVSSv4
VulDB CVSS-B Score: 🔍VulDB CVSS-BT Score: 🔍
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 5.3VulDB Meta Temp Score: 4.6
VulDB Base Score: 5.3
VulDB Temp Score: 4.6
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv2
AV | AC | Au | C | I | A |
---|---|---|---|---|---|
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
---|---|---|---|---|---|
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
Exploiting
Class: Memory corruptionCWE: CWE-119
CAPEC: 🔍
ATT&CK: 🔍
Local: No
Remote: Yes
Availability: 🔍
Status: Unproven
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
0-Day | unlock | unlock | unlock | unlock |
---|---|---|---|---|
Today | unlock | unlock | unlock | unlock |
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: PatchStatus: 🔍
Reaction Time: 🔍
0-Day Time: 🔍
Exposure Time: 🔍
Patch: git.videolan.org
Timeline
07/11/2013 🔍02/06/2014 🔍
02/06/2014 🔍
02/14/2014 🔍
06/18/2022 🔍
Sources
Product: ffmpeg.orgAdvisory: truemotion1: check the header size
Status: Confirmed
CVE: CVE-2014-125023 (🔍)
X-Force: 91081 - FFmpeg truemotion1_decode_header() denial of service, Medium Risk
Secunia: 56838 - FFmpeg Multiple Vulnerabilities, Moderately Critical
See also: 🔍
Entry
Created: 02/14/2014 09:18 AMUpdated: 06/18/2022 08:28 AM
Changes: 02/14/2014 09:18 AM (44), 04/16/2019 11:20 AM (8), 06/18/2022 08:28 AM (3)
Complete: 🔍
Cache ID: 18:FA4:40
No comments yet. Languages: en.
Please log in to comment.