Signature Detail

HTTP: FFmpeg vmd_read_header Integer Overflow

This signature detects attempts to exploit a known vulnerability in FFmpeg. It is due to an integer overflow within the "vmd_read_header()" function in "libavformat/sierravmd.c". A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the affected application.

Extended Description

FFmpeg is prone to a remote heap-based buffer-overflow vulnerability because of insufficient boundary checks when parsing STR data. Remote attackers can exploit this issue by enticing victims into opening maliciously crafted VMD files. Successful exploits may allow attackers to execute arbitrary code within the context of an affected application. Failed exploit attempts will likely result in a denial of service. FFmpeg 0.5 is vulnerable; other versions may also be affected.

Affected Products

• FFmpeg 0.5
• Pardus Linux 2009

References

• BugTraq: 36419