• info
• discussion
• exploit
• solution
• references

FFmpeg Real Media File Parsing Memory Corruption Remote Code Execution Vulnerability

FFmpeg is prone to a remote code-execution vulnerability because it fails to adequately validate user-supplied input.

An attacker can exploit this issue to execute arbitrary code in the context of the application. Failed exploit attempts will result in a denial-of-service condition.

Versions prior to FFmpeg 0.5.4 are vulnerable.