UBUNTU-CVE-2016-2213

The jpeg2000decodetile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 allows remote attackers to cause a denial of service out-of-bounds array read access via crafted JPEG 2000 data...

ALPINE-CVE-2016-2213

The jpeg2000decodetile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 allows remote attackers to cause a denial of service out-of-bounds array read access via crafted JPEG 2000 data...

PT-2016-1254

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.8.6 Description The issue is caused by a buffer overflow in the jpeg2000 decode tile function of the FFmpeg library. This can be exploited by a remote attacker using specially crafted JPEG 2000 data, potentially...

PT-2016-3986

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.x through 2.0.0 Description The issue is related to the s7comm decode ud cpu szl subfunc function in the S7COMM dissector, which does not validate the list count in an SZL response. This allows remote attackers to cause ...

Adobe Flash LoadVars decode Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

PT-2015-3158

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.8.4 Description The issue arises from the ff dwt decode function in libavcodec/jpeg2000dwt.c not validating the number of decomposition levels before proceeding with Discrete Wavelet Transform decoding. This allows...

The vulnerability of the FFmpeg multimedia library, which allows a hacker to trigger a service failure

The vulnerability in the decodeuncompressed function in the libavcodec/faxcompr.c multimedia library of FFmpeg exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by using specially crafted CCITT FAX data...

PT-2016-3470

Name of the Vulnerable Software and Affected Versions dhcpcd versions 3.x Description The issue is related to the decode search function in dhcp.c, which does not properly free allocated memory. This allows remote DHCP servers to cause a denial of service via a crafted response. Recommendations F...

PT-2016-3469

Name of the Vulnerable Software and Affected Versions dhcpcd versions 3.x Description The issue is related to the decode search function in dhcp.c, which allows remote DHCP servers to cause a denial of service through an out-of-bounds read via a crafted response. Recommendations For dhcpcd versio...

PT-2015-7774

Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.17.1 Description The issue is related to an array index error in the smal decode segment function, which can be exploited by context-dependent attackers to cause memory errors and potentially execute arbitrary code...

PT-2015-7773

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.6.5 FFmpeg versions 2.7.x prior to 2.7.3 FFmpeg versions 2.8.x through 2.8.2 Description The issue is related to the smka decode frame function in libavcodec/smacker.c, which does not verify that the data size is...

Sam Spade 1.14 - Decode URL Buffer Overflow Crash PoC

Exploit for windows platform in category dos / poc !/usr/bin/env python Exploit Title : Sam Spade 1.14 Decode URL Buffer Overflow Crash PoC Discovery by : Vivek Mahajan - c3p70r Discovery Date : 19/11/2015 Vendor Homepage : http://samspade.org Software Link :...

Sam Spade 1.14 - Decode URL Buffer Overflow Crash (PoC)

Sam Spade 1.14 - Decode URL Buffer Overflow Crash PoC !/usr/bin/env python Exploit Title : Sam Spade 1.14 Decode URL Buffer Overflow Crash PoC Discovery by : Vivek Mahajan - c3p70r Discovery Date : 19/11/2015 Vendor Homepage : http://samspade.org Software Link :...

Sam Spade 1.14 - Decode URL Buffer Overflow Crash (PoC)

!/usr/bin/env python Exploit Title : Sam Spade 1.14 Decode URL Buffer Overflow Crash PoC Discovery by : Vivek Mahajan - c3p70r Discovery Date : 19/11/2015 Vendor Homepage : http://samspade.org Software Link : http://www.majorgeeks.com/files/details/samspade.html Tested Version : 1.14 Vulnerabilit...

FFmpeg 'decode_uncompressed' function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'decodeuncompressed' function in the libavcodec/faxcompr.c file in versions of FFmpeg prior to 2.8.2. As the program fails to validate the operation o...

FFmpeg 'ljpeg_decode_yuv_scan' function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'ljpegdecodeyuvscan' function in the libavcodec/mjpegdec.c file in versions of FFmpeg prior to 2.8.2. As the program fails to perform length and width...

PT-2015-2761

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.8.2 Description The issue exists due to insufficient input validation in the decode uncompressed function. This can be exploited by a remote attacker using specially crafted CCITT FAX data, potentially leading to a...

PT-2015-2759

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.8.2 Description The issue is related to the ljpeg decode yuv scan function in libavcodec/mjpegdec.c, which lacks certain width and height checks. This allows remote attackers to cause a denial of service out-of-bound...

[SECURITY] Fedora 21 Update: libvdpau-1.1.1-2.fc21

VDPAU is the Video Decode and Presentation API for UNIX. It provides an interface to video decode acceleration and presentation hardware present in modern GPUs...

PT-2015-6935

Name of the Vulnerable Software and Affected Versions Libav versions prior to 11.5 Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and application crash, via a file with crafted dimensions. This is due to a problem in the ff h263...