PT-2012-4251

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.11 Libav versions 0.7.x prior to 0.7.7 Libav versions 0.8.x prior to 0.8.4 Description The issue is related to the decode pic function in libavcodec/cavsdec.c, specifically concerning "width/height changing in CAVS"...

PT-2012-4255

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.11 Libav versions 0.7.x prior to 0.7.7 Libav versions 0.8.x prior to 0.8.4 Description The issue is related to "width/height changing in CAVS" and is located in the decode pic function in libavcodec/cavsdec.c. The...

PT-2012-4268

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.11 Libav versions prior to 0.8.5 Description The issue is related to a calculation in the decode frame mp3on4 function in libavcodec/mpegaudiodec.c that prevents a frame from being "large enough." The impact and atta...

PT-2012-4269

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.11 Libav versions 0.7.x prior to 0.7.7 Libav versions 0.8.x prior to 0.8.4 Description The issue is related to an "out of array write" in the decode dds1 function. The impact and attack vectors of this issue are...

PT-2012-4273

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.11 Libav versions prior to 0.8.4 Description The issue is related to the ac3 decode frame function in libavcodec/ac3dec.c, involving the number of output channels and out of array writes. The impact and attack vector...

PT-2012-4274

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.11 Libav versions 0.7.x prior to 0.7.7 Libav versions 0.8.x prior to 0.8.5 Description A double free vulnerability exists in the mpeg decode frame function, located in libavcodec/mpeg12.c, which has unknown impact an...

PT-2012-4253

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.11 Description The issue is related to an unspecified vulnerability in the decode slice header function in libavcodec/h264.c, which is connected to a "rejected resolution change." The impact and attack vectors of thi...

PT-2012-4262

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.11 Libav versions 0.7.x prior to 0.7.7 Libav versions 0.8.x prior to 0.8.5 Description The issue is related to multiple unspecified vulnerabilities in the decode band hdr function in indeo4.c and the ff ivi decode...

PT-2012-4264

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.11 Libav versions 0.7.x prior to 0.7.7 Libav versions 0.8.x prior to 0.8.4 Description The issue is related to an unspecified vulnerability in the lag decode zero run line function, which has unknown impact and attac...

PT-2012-4265

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.11 Libav versions 0.7.x prior to 0.7.7 Libav versions 0.8.x prior to 0.8.4 Description The issue is related to an unspecified vulnerability in the decode mb info function, located in libavcodec/indeo5.c. This...

PT-2012-4266

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.11 Description The issue involves multiple unspecified vulnerabilities in the libavcodec/wmalosslessdec.c component of FFmpeg. These vulnerabilities are related to three main areas: 1 the size of mclms arrays, 2 a ge...

PT-2012-4267

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.11 Libav versions prior to 0.8.4 Description The issue is related to inconsistencies in coded slice positions and interlacing that trigger out of array writes in the vc1 decode frame function. This function is locate...

PT-2012-4247

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.11 Libav versions 0.7.x prior to 0.7.7 Libav versions 0.8.x prior to 0.8.4 Description The issue is related to an unspecified vulnerability in the ff rv34 decode frame function, which is associated with "width/height...

PT-2012-4263

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.11 Description The issue is related to an unspecified vulnerability in the decode init function in libavcodec/wmalosslessdec.c. It has unknown impact and attack vectors, related to the samples per frame...

CVE-2012-3461

The 1 otrlbase64otrdecode function in src/b64.c; 2 otrlprotodatareadflags and 3 otrlprotoacceptdata functions in src/proto.c; and 4 decode function in toolkit/parse.c in libotr before 3.2.1 allocates a zero-length buffer when decoding a base64 string, which allows remote attackers to cause a deni...

DEBIAN-CVE-2012-0851

The ffh264decodeseqparameterset function in h264ps.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via ...

DEBIAN-CVE-2011-3952

The decodeinit function in kmvc.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a large palette size...

DEBIAN-CVE-2012-0852

The adpcmdecodeframe function in adpcm.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via an ADPCM fil...

PT-2012-2907

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.9.1 Libav versions 0.5.x through 0.5.8 Libav versions 0.6.x through 0.6.5 Libav versions 0.7.x through 0.7.5 Libav versions 0.8.x through 0.8.2 Description The issue allows remote attackers to cause a denial of...

PT-2012-2910

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.9.1 Description The issue is related to the dpcm decode frame function in libavcodec/dpcm.c, which does not properly handle a pointer after an audio API change. This can be exploited by remote attackers to cause a...