UBUNTU-CVE-2014-0045

The needSamples method in AudioOutputSpeech.cpp in the client in Mumble 1.2.4 and the 1.2.3 pre-release snapshots, Mumble for iOS 1.1 through 1.2.2, and MumbleKit before commit fd190328a9b24d37382b269a5674b0c0c7a7e36d does not check the return value of the opusdecodefloat function, which allows...

UBUNTU-CVE-2012-6616

The movtextdecodeframe function in libavcodec/movtextdec.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service out-of-bounds read and crash via crafted 3GPP TS 26.245 data...

PT-2013-2049

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.0.2 Description The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and crash, via crafted 3GPP TS 26.245 data. This is due to a problem in the mov text decode frame...

Fedora Update for dcraw FEDORA-2013-22929

Check for the Version of dcraw OpenVAS Vulnerability Test Fedora Update for dcraw FEDORA-2013-22929 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

[SECURITY] Fedora 18 Update: dcraw-9.19-4.fc18

This package contains dcraw, a command line tool to decode raw image data downloaded from digital cameras...

DEBIAN-CVE-2013-7015

The flashsvdecodeframe function in libavcodec/flashsv.c in FFmpeg before 2.1 does not properly validate a certain height value, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted Flash Screen Video data...

DEBIAN-CVE-2013-7009

The rpzadecodestream function in libavcodec/rpza.c in FFmpeg before 2.1 does not properly maintain a pointer to pixel data, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted Apple RPZA data...

CVE-2011-3946

The ffh264decodesei function in libavcodec/h264sei.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Supplemental enhancement information SEI data, which triggers an infinite loop...

PT-2013-1417

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.10 Description The issue is related to the dirac decode data unit function in libavcodec/diracdec.c, which can be exploited by remote attackers through a crafted value in the reference pictures number. This can have ...

PT-2013-1414

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.10 Description The issue is related to the smacker decode header tree function in libavcodec/smacker.c, which can be exploited by remote attackers using crafted Smacker data. Recommendations For versions prior to 0.1...

PT-2013-1415

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.10 Description The issue is related to the ff h264 decode sei function in libavcodec/h264 sei.c, which can be exploited by remote attackers through crafted Supplemental enhancement information SEI data. This...

PT-2013-6229

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the rpza decode stream function in libavcodec/rpza.c, which does not properly maintain a pointer to pixel data. This allows remote attackers to cause a denial of service...

DEBIAN-CVE-2013-0844

Off-by-one error in the adpcmdecodeframe function in libavcodec/adpcm.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via crafted DK4 data, which triggers an out-of-bounds array access...

DEBIAN-CVE-2013-0849

The roqdecodeinit function in libavcodec/roqvideodec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted 1 width or 2 height dimension that is not a multiple of sixteen in id RoQ video data...

DEBIAN-CVE-2013-0850

The decodesliceheader function in libavcodec/h264.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted H.264 data, which triggers an out-of-bounds array access...

DEBIAN-CVE-2013-0846

Array index error in the qdm2decodesuperblock function in libavcodec/qdm2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted QDM2 data, which triggers an out-of-bounds array access...

DEBIAN-CVE-2013-0858

The atrac3decodeinit function in libavcodec/atrac3.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via ATRAC3 data with the joint stereo coding mode set and fewer than two channels...

CVE-2013-0848

The decodeinit function in libavcodec/huffyuv.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted width in huffyuv data with the predictor set to median and the colorspace set to YUV422P, which triggers an out-of-bounds array access...

CVE-2013-4446

The jsondecode function in plugins/contextreactionblock.inc in the Context module 6.x-2.x before 6.x-3.2 and 7.x-3.x before 7.x-3.0 for Drupal, when using a version of PHP that does not support the jsondecode function, allows remote attackers to execute arbitrary PHP code via unspecified vectors...

PT-2013-2653

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1 Description The issue is related to the roq decode init function in libavcodec/roqvideodec.c, which allows remote attackers to have an unspecified impact via a crafted width or height dimension that is not a multip...