FFmpeg 1.0 libavcodec/mjpegdec.c mjpeg_decode_scan_progressive_ac input validation

A vulnerability was found in FFmpeg 1.0 (Multimedia Processing Software) and classified as critical. Affected by this issue is the function mjpeg_decode_scan_progressive_ac of the file libavcodec/mjpegdec.c. Upgrading to version 1.1 eliminates this vulnerability. The upgrade is hosted for download at git.videolan.org. Applying a patch is able to eliminate this problem. The bugfix is ready for download at git.videolan.org. The best possible mitigation is suggested to be upgrading to the latest version. A possible mitigation has been published immediately after the disclosure of the vulnerability.