FFmpeg contains an unspecified overflow condition in the 'matroska_parse_block' function in libavformat/matroskadec.c. With a specially crafted MKV file, a context-dependent attacker can cause a heap-based buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code.
Classification
Location:
Context Dependent
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Solution:
Third-Party Solution,
Solution Unknown
Exploit:
PoC Public
Disclosure:
Vendor Verified,
Coordinated Disclosure
OSVDB:
Web Related
Solution
OSVDB is not currently aware of a solution for this vulnerability.
Upgrade to Google Chrome version 17.0.963.56 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
