Numeric Errors

Summary

Integer overflow in the ff_ivi_init_planes function in libavcodec/ivi.c in FFmpeg 0.6 prior to 2.4.12, 2.5.x prior to 2.5.9, 2.6.x prior to 2.6.5, 2.7.x prior to 2.7.3, and 2.8.x prior to 2.8.3, 2.9-dev allows remote attackers to cause a denial of service (out-of-bounds heap-memory access) or possibly have unspecified other impact via crafted image dimensions in Indeo Video Interactive data.