This host is installed with FFmpeg and is prone to multiple vulnerabilities

Successful exploitation could result in Denial of Serivce condition(application crash or infinite loop) or possibly allow execution of arbitrary code. Impact Level: Application

Upgrad to FFmpeg version 0.5.2 or later, For updates refer to http://www.ffmpeg.org/download.html Workaround: Apply workaround from below link, http://scarybeastsecurity.blogspot.com/2009/09/patching-ffmpeg-into-shape.html

The multiple flaws are due to: - An out-of-bounds array index error in 'vorbis_dec.c' - An off-by-one indexing error in 'vp3.c' - Pointer arithmetic error in 'oggparsevorbis.c' - Assignment vs comparison operator mix-up error in 'vorbis_dec.c' - Integer underflow error leading to stack pointer wrap-around in 'vorbis_dec.c' - Integer underflow error in 'mov.c' - Type confusion error in 'mov.c'/'utils.c'

FFmpeg version 0.5 on Linux.

• http://scarybeastsecurity.blogspot.com/2009/09/patching-ffmpeg-into-shape.html

---

Updated on 2017-03-28