UBUNTU-CVE-2016-5199

An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted video file...

CVE-2016-5199

An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted video file...

ffmpeg memory leak vulnerability

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams. Under the LGPL or GPL license. It provides a complete solution for recording, converting, and streaming audio and video. A memory leak vulnerability exists in avireadheader in...

Mozilla Firefox and Firefox ESR Denial of Service Vulnerability (CNVD-2016-06138)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A denial of service vulnerability exists in Mozilla Firefox versions prior to 48.0 and Firefox ES...

CVE-2016-2839

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo cairosurfacegetextents calls that do not properly interact with libav header allocation in FFmpeg 0.10, which allows remote attackers to cause a denial of service application crash via a crafted video...

CVE-2016-2839

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo cairosurfacegetextents calls that do not properly interact with libav header allocation in FFmpeg 0.10, which allows remote attackers to cause a denial of service application crash via a crafted video...

UBUNTU-CVE-2016-2839

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo cairosurfacegetextents calls that do not properly interact with libav header allocation in FFmpeg 0.10, which allows remote attackers to cause a denial of service application crash via a crafted video...

The vulnerability of the SeaMonkey software allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

A vulnerability exists in the mozilla::dom::TextTrack::AddCue function in Mozilla Firefox and SeaMonkey due to improper garbage collection of text track management variables. Exploiting this vulnerability allows malicious actors to execute arbitrary code or cause service failures e.g., errors whe...

The vulnerability of the Apple QuickTime multimedia package, which allows a malicious attacker to execute arbitrary code or cause a service failure.

Apple QuickTime software contains a vulnerability related to the absence of initialization for pointers. Exploiting this vulnerability allows an unauthorized attacker to execute arbitrary code or cause a system failure by using a specially crafted list of paths in the video file...

Debian DLA-464-1 : libav security update

It was discovered that there was a use-after free vulnerability in libav, a multimedia player, server, encoder and transcoder library. The segwritepacket function in libavformat/segment.c in ffmpeg 2.1.4 and earlier does not free the correct memory location, which allows remote attackers to cause...

The vulnerability of the FFmpeg multimedia library, which allows a intruder to trigger a service failure or cause other effects

The vulnerability of the apngencodeframe and encodeapng functions in the FFmpeg multimedia library is due to buffer overflow. Exploiting this vulnerability can allow an attacker to cause service interruptions or other effects by using a specially created .avi file...

FFmpeg Denial of Service Vulnerability (CNVD-2016-01129)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the libavcodec/pngenc.c file in FFmpeg versions prior to 2.8.5, which is caused by the program using incorrect line sizes during line calculations. The...

Mozilla Firefox Denial of Service Vulnerability (CNVD-2016-00847)

Mozilla Firefox on Android is an open source web browser for the Android platform. The 'MoofParser::Metadata' function in the binding/MoofParser.cpp file in the Mozilla Firefox libstagefright library fails to limit the size of the result of a read operation, allowing remote attackers to conduct...

Apple QuickTime Denial of Service Vulnerability (CNVD-2016-00194)

Apple QuickTime is a multimedia playback software developed by Apple. The program is capable of handling a wide range of resources such as digital video, media passages, and more. A security vulnerability exists in Apple QuickTime versions prior to 7.7.9. A remote attacker can exploit this...

Apple QuickTime Denial of Service Vulnerability (CNVD-2016-00192)

Apple QuickTime is a multimedia playback software developed by Apple. The program is capable of handling a wide range of resources such as digital video, media passages, and more. A security vulnerability exists in Apple QuickTime versions prior to 7.7.9. A remote attacker can exploit this...

Apple QuickTime Denial of Service Vulnerability (CNVD-2016-00196)

Apple QuickTime is a multimedia playback software developed by Apple. The program is capable of handling a wide range of resources such as digital video, media passages, and more. A security vulnerability exists in Apple QuickTime versions prior to 7.7.9. A remote attacker can exploit this...

Apple QuickTime Denial of Service Vulnerability (CNVD-2016-00195)

Apple QuickTime is a multimedia playback software developed by Apple. The program is capable of handling a wide range of resources such as digital video, media passages, and more. A security vulnerability exists in Apple QuickTime versions prior to 7.7.9. A remote attacker can exploit this...

Apple QuickTime Denial of Service Vulnerability (CNVD-2016-00193)

Apple QuickTime is a multimedia playback software developed by Apple. The program is capable of handling a wide range of resources such as digital video, media passages, and more. A security vulnerability exists in Apple QuickTime versions prior to 7.7.9. A remote attacker can exploit this...

Apple QuickTime Denial of Service Vulnerability (CNVD-2016-00191)

Apple QuickTime is a multimedia playback software developed by Apple. The program is capable of handling a wide range of resources such as digital video, media passages, and more. A security vulnerability exists in Apple QuickTime versions prior to 7.7.9. A remote attacker can exploit this...

The vulnerability of Firefox and Firefox ESR browsers allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the Metadata::setData function found in MetaData.cpp in libstagefright in Firefox and Firefox ESR browsers arises due to a loss of precision for integer operations. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure using an...