FFmpeg.OGV.File.Format.Memory.Corruption

Release DateDec 17, 2009
SeverityHigh
ImpactSystem Compromise
DescriptionThis indicates an attack attempt against a memory-corruption vulnerability in FFmpeg.

The vulnerability is caused by an error when the vulnerable software handles a specially crafted "ogv" file. It allows a remote attacker to execute arbitrary code.
Affected ProductsFFmpeg 0.5
Recommended ActionsUpgrade to the latest versions:
http://ffmpeg.mplayerhq.hu/
Reference/shttp://www.securityfocus.com/bid/36465 (BugTraq)
http://secunia.com/advisories/36805/
Reference: VID-17999