CVE-2017-14058: Loop with Unreachable Exit Condition

In FFmpeg 2.4 and 3.3.3, the readdata function in libavformat/hls.c does not restrict reload attempts for an insufficient list, which allows remote attackers to cause a denial of service infinite loop...

CVE-2017-14056: Excessive Iteration

In libavformat/rl2.c in FFmpeg 3.3.3, a DoS in rl2readheader due to lack of an EOF End of File check might cause huge CPU and memory consumption. When a crafted RL2 file, which claims a large "framecount" field in the header but does not contain sufficient backing data, is provided, the loops for...

CVE-2017-14055: Excessive Iteration

In libavformat/mvdec.c in FFmpeg 3.3.3, a DoS in mvreadheader due to lack of an EOF End of File check might cause huge CPU and memory consumption. When a crafted MV file, which claims a large "nbframes" field in the header but does not contain sufficient backing data, is provided, the loop over t...

FFmpeg Denial of Service Vulnerability (CNVD-2017-30436)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg version 0.10. A remote attacker can exploit this vulnerability to cause a denial of service...

Debian DSA-3957-1 : ffmpeg - security update

Several vulnerabilities have been discovered in FFmpeg, a multimedia player, server and encoder. These issues could lead to Denial-of-Service and, in some situation, the execution of arbitrary code. - CVE-2017-9608 Yihan Lian of Qihoo 360 GearTeam discovered a NULL pointer access when parsing a...

[SECURITY] [DSA 3957-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3957-1 [email protected] https://www.debian.org/security/ Luciano Bello August 28, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3957-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3957-1 [email protected] https://www.debian.org/security/ Luciano Bello August 28, 2017 https://www.debian.org/security/faq -...

Design/Logic Flaw

The 'vp3decodeframe' function in FFmpeg 1.1.4 moves threads check out of header packet type check...

Design/Logic Flaw

Unspecified vulnerability in FFMPEG 0.10 allows remote attackers to cause a denial of service...

CVE-2012-2805

Unspecified vulnerability in FFMPEG 0.10 allows remote attackers to cause a denial of service...

CVE-2012-2805

Unspecified vulnerability in FFMPEG 0.10 allows remote attackers to cause a denial of service...

CVE-2013-0870

The 'vp3decodeframe' function in FFmpeg 1.1.4 moves threads check out of header packet type check...

CVE-2012-2805

Unspecified vulnerability in FFMPEG 0.10 allows remote attackers to cause a denial of service...

CVE-2013-0870

The 'vp3decodeframe' function in FFmpeg 1.1.4 moves threads check out of header packet type check...

UBUNTU-CVE-2012-2805

Unspecified vulnerability in FFMPEG 0.10 allows remote attackers to cause a denial of service...

DEBIAN-CVE-2012-2805

Unspecified vulnerability in FFMPEG 0.10 allows remote attackers to cause a denial of service...

CVE-2013-0870

The 'vp3decodeframe' function in FFmpeg 1.1.4 moves threads check out of header packet type check...

CVE-2012-2805

Unspecified vulnerability in FFMPEG 0.10 allows remote attackers to cause a denial of service...

CVE-2013-0870

The 'vp3decodeframe' function in FFmpeg 1.1.4 moves threads check out of header packet type check...

CVE-2012-2805

Unspecified vulnerability in FFMPEG 0.10 allows remote attackers to cause a denial of service...