CVE-2011-4579

The CVE-2011-4579 entry concerns the SVQ1 decoder function svq1_decode_frame in FFmpeg/libavcodec (svq1dec.c). A crafted SVQ1 stream can trigger a memory corruption vulnerability that allows remote denial of service, with impact described as a crash via a stream whose dimensions change. Affected ...

CVE-2011-4352

CVE-2011-4352 describes an integer overflow in the VP3 decoder’s vp3_dequant() in FFmpeg/libavcodec (and Libav) that can be triggered by a crafted VP3 stream, potentially causing a crash or remote code execution. Affected versions: FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9...

CVE-2011-3945

CVE-2011-3945 affects FFmpeg/Libav: the decode_frame function in the KVG1 decoder (kgv1dec.c) in libavcodec vulnerable to crafted media files, enabling remote DoS and possibly code execution. Affected, per description: FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11; Libav 0.5.x before 0.5.9, ...

CVE-2011-4353

CVE-2011-4353 affects FFmpeg and Libav: the vulnerable functions are av_image_fill_pointers , vp5_parse_coeff , and vp6_parse_coeff . A crafted VP5/VP6 stream can trigger an out-of-bounds read, causing a denial of service. Affected versions include FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0...

CVE-2011-4364

CVE-2011-4364 : A vulnerability in the Sierra VMD decoder within FFmpeg/libavcodec and Libav allows a crafted VMD file to cause a denial of service and potentially execute arbitrary code via a buffer overflow. Affected products/versions include FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x...

CVE-2011-3940

nsvdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service out-of-bounds read and write via a crafted NSV file that triggers "us...

CVE-2011-3947

Buffer overflow in mjpegbdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a...

CVE-2011-3929

The avprivdvproducepacket function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service NULL pointer dereference and application cras...

Design/Logic Flaw

The renderline function in the vorbis codec vorbis.c in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted Vorbis file, related to a large multiplier. NOTE: this vulnerability exists because of...

CVE-2011-3940

CVE-2011-3940 affects FFmpeg and Libav packages where nsvdec.c in libavcodec could trigger an out-of-bounds read/write via a crafted NSV file, leading to a denial of service. Versions impacted include FFmpeg 0.7.x before 0.7.12, FFmpeg 0.8.x before 0.8.11, Libav 0.5.x before 0.5.9, Libav 0.6.x be...

CVE-2011-3952

CVE-2011-3952 affects FFmpeg libavcodec KMVC decoding (decode_init in kmvc.c). According to the initial description, the issue allows a remote attacker to cause a crash (DoS) and possibly execute arbitrary code via a large KMVC palette in a KMVC-encoded file, affecting FFmpeg up to pre-0.10 and L...

CVE-2011-3929

The CVE-2011-3929 issue affects FFmpeg and Libav releases, where the avpriv_dv_produce_packet function in libavcodec may dereference NULL pointers when processing a crafted DV file, potentially causing a crash and enabling arbitrary code execution. Affected versions include FFmpeg 0.7.x before 0....

CVE-2011-3947

CVE-2011-3947 describes a buffer overflow in mjpegbdec.c of FFmpeg/libavcodec that can be triggered by a crafted MJPEG-B file. Affected components/versions include FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x b...

CVE-2011-3951

CVE-2011-3951 affects FFmpeg/Libav: the dpcm_decode_frame function in libavcodec/dpcm.c is vulnerable. Remote attackers could crash the app or execute arbitrary code via a crafted stereo stream. Affected versions: FFmpeg before 0.10; Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7....

CVE-2011-3952

The decodeinit function in kmvc.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a large palette size...

CVE-2011-3936

CVE-2011-3936 affects FFmpeg/libavcodec DV handling. The vulnerability exists in dv_extract_audio() for FFmpeg 0.7.x before 0.7.12, 0.8.x before 0.8.11 and Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, 0.8.x before 0.8.1. It allows remote attackers to trigger an out-of-bounds ...

CVE-2011-3951

The dpcmdecodeframe function in dpcm.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted stere...

CVE-2011-3940

nsvdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service out-of-bounds read and write via a crafted NSV file that triggers "us...

Fedora 16 : python-djblets-0.6.22-2.fc16 (2012-11576)

Previous version of python-djblets contained embedded / own copy of python-feedparser BUILD/Djblets-0.6.22/djblets/feedview feedparser.py code, which is vulnerable to numerous security flaws CVE-2009-5065, CVE-2011-1156, CVE-2011-1157, and CVE-2011-1158 to mention some of them. This package...

ZDI-12-136 : Apple QuickTime Invalid Public Movie Atom Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-136 : Apple QuickTime Invalid Public Movie Atom Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-136 August 17, 2012 - -- CVE ID: CVE-2011-3220 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - -- Affected...