PT-2013-6235

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the flashsv decode frame function in libavcodec/flashsv.c, which does not properly validate a certain height value. This allows remote attackers to cause a denial of service...

PT-2013-6242

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the g2m init buffers function in libavcodec/g2meet.c, which does not properly allocate memory for tiles. This can be exploited by remote attackers using crafted Go2Webinar data,...

PT-2013-6233

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the g2m init buffers function in libavcodec/g2meet.c, which uses an incorrect ordering of arithmetic operations. This can be exploited by remote attackers using crafted Go2Webina...

PT-2013-6243

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the ff combine frame function in libavcodec/parser.c, which does not properly handle certain memory-allocation errors. This can be exploited by remote attackers using crafted dat...

PT-2013-6229

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the rpza decode stream function in libavcodec/rpza.c, which does not properly maintain a pointer to pixel data. This allows remote attackers to cause a denial of service...

PT-2013-6230

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to multiple integer signedness errors in the libavcodec/dsputil.c file. This can be exploited by remote attackers using crafted data, potentially leading to a denial of service due ...

PT-2013-6236

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the get siz function in libavcodec/jpeg2000dec.c, which does not ensure the expected sample separation. This allows remote attackers to cause a denial of service out-of-bounds...

PT-2013-6232

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the get siz function in libavcodec/jpeg2000dec.c, which does not prevent attempts to use non-zero image offsets. This allows remote attackers to cause a denial of service...

PT-2013-6234

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to an integer signedness error in the add bytes l2 c function in libavcodec/pngdsp.c, which can be triggered by crafted PNG data. This error can cause a denial of service due to...

PT-2013-6244

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the jpeg2000 decode tile function in libavcodec/jpeg2000dec.c, which does not consider the component number in certain calculations. This allows remote attackers to cause a denia...

PT-2013-6240

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the read header function in libavcodec/ffv1dec.c, which does not properly enforce certain bit-count and colorspace constraints. This allows remote attackers to cause a denial of...

CVE-2013-7014: Undefined Security Weakness

Integer signedness error in the addbytesl2c function in libavcodec/pngdsp.c in FFmpeg before 2.1 allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted PNG data...

CVE-2013-7010: Undefined Security Weakness

Multiple integer signedness errors in libavcodec/dsputil.c in FFmpeg before 2.1 allow remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted data...

CVE-2013-7018: Improper Restriction of Operations within the Bounds of a Memory Buffer

libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not ensure the use of valid code-block dimension values, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JPEG2000 data...

CVE-2013-7023: Improper Restriction of Operations within the Bounds of a Memory Buffer

The ffcombineframe function in libavcodec/parser.c in FFmpeg before 2.1 does not properly handle certain memory-allocation errors, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted data...

CVE-2013-7011: Improper Restriction of Operations within the Bounds of a Memory Buffer

The readheader function in libavcodec/ffv1dec.c in FFmpeg before 2.1 does not prevent changes to global parameters, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted FFV1 data...

CVE-2013-7015: Improper Input Validation

The flashsvdecodeframe function in libavcodec/flashsv.c in FFmpeg before 2.1 does not properly validate a certain height value, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted Flash Screen Video data...

CVE-2013-7013: Undefined Security Weakness

The g2minitbuffers function in libavcodec/g2meet.c in FFmpeg before 2.1 uses an incorrect ordering of arithmetic operations, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted Go2Webinar data...

CVE-2013-0859

The adddoublesmetadata function in libavcodec/tiff.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a negative or zero count value in a TIFF image, which triggers an out-of-bounds array access...

CVE-2013-0844

Off-by-one error in the adpcmdecodeframe function in libavcodec/adpcm.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via crafted DK4 data, which triggers an out-of-bounds array access...