The vulnerability affects the flic file format parser, insufficient restrictions on a writable buffer can be exploited to execute arbitrary code via the heap memory. A specific flic file can be crafted to trigger the vulnerability. fixed in r25223 http://git.ffmpeg.org/?p=ffmpeg;a=commitdiff;=16c592155f117ccd7b86006c45aacc692a81c23b
правильная ссылка: http://git.ffmpeg.org/?p=ffmpeg;a=commitdiff;h=16c592155f117ccd7b86006c45aacc692a81c23b
* Thu Nov 04 2010 Sergey Bolshakov <sbolshakov@altlinux> 1:0.6-alt2 - 25671 revision from trunk
