Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the ffmpeg package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

The vulnerability of Google Chrome browser allows a malicious actor to trigger a service failure.

Google Chrome browser contains a vulnerability related to buffer overflow in the dynamic memory of the FFmpegVideoDecoder::GetVideoBuffer function in media/filters/ffmpegvideodecoder.cc. Exploiting this vulnerability allows malicious actors to cause system failures or other adverse effects throug...

GLSA-201606-09 : FFmpeg: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201606-09 FFmpeg: Multiple vulnerabilities Multiple vulnerabilities have been discovered in FFmpeg. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary code o...

Libav 'mov_read_dref' Function Denial of Service Vulnerability

Libav is a cross-platform solution for recording and converting audio and video from the Libav team, and FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A denial of service vulnerability exists in the 'movreaddref' function in the...

FFmpeg: Multiple vulnerabilities

Background FFmpeg is a complete, cross-platform solution to record, convert and stream audio and video. Description Multiple vulnerabilities have been discovered in FFmpeg. Please review the CVE identifiers referenced below for details. Impact A remote attacker could possibly execute arbitrary co...

CVE-2016-3062

The movreaddref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via the entries value in a dref box in an MP4 file...

CVE-2016-3062

The movreaddref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via the entries value in a dref box in an MP4 file...

Memory corruption

The movreaddref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via the entries value in a dref box in an MP4 file...

CVE-2016-3062

The movreaddref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via the entries value in a dref box in an MP4 file...

CVE-2016-3062

The movreaddref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via the entries value in a dref box in an MP4 file...

CVE-2016-3062

The movreaddref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via the entries value in a dref box in an MP4 file...

CVE-2016-3062

CVE-2016-3062 affects Libav (libavformat/mov.c: mov_read_dref) and FFmpeg; vulnerable are Libav < 11.7 and FFmpeg

CVE-2016-3062: Improper Restriction of Operations within the Bounds of a Memory Buffer

The movreaddref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via the entries value in a dref box in an MP4 file...

PT-2016-5349

Name of the Vulnerable Software and Affected Versions Libav versions prior to 11.7 FFmpeg versions prior to 0.11 Description The issue allows remote attackers to cause a denial of service or execute arbitrary code via the entries value in a dref box in an MP4 file. This is due to a problem in the...

Memory Leak

FFmpeg is vulnerable to memory leaks. A malicious user can trigger a memory leak by passing a malicious AVI file containing a strh structure...

FFmpeg remote file stealing vulnerabilities – moving end of the safety analysis report-vulnerability warning-the black bar safety net

0x1 vulnerability of origin FFmpeg remote file stealing vulnerabilities original source is Foreign vulnerability of the platform,the last year has been in the CTF match is used. Official in January of this year released the fixed version and published the vulnerability number CVE-2 0 1 6-1 8 9...

CVE-2 0 1 6-1897/8 - FFMpeg vulnerability analysis-vulnerability warning-the black bar safety net

This time there are a lot of vulnerabilities to a sudden outbreak, just like these days of ImageMagick vulnerability swept through the domestic Internet. This a day or two in the black bar safety net@Noxxx first made a two major manufacturers of FFmpeg vulnerabilities, and then also by the other...

FFmpeg 2.x版本服务器端请求伪造漏洞

详情来源 ：ffmpeg SSRF漏洞分析 ffmpeg得反应很快，1月16日就发布了修复版本。 漏洞影响 如果ffmpeg解析了一个恶意的文件，会导致本地的文件信息泄露。受影响的出了ctf中这个在线视频格式转换的服务外，如果是采用ffmpeg了客户端如果可以输入恶意文件也会造成本地文件信息泄露。 漏洞分析 change log中提到了两个CVE CVE-2016-1897和CVE-2016-1898。 CVE-2016-1897 FFmpeg 2.x版本允许攻击者通过服务器端请求伪造SSRF：Server-Side Request Forgery...

CVE-2016-1528: FFmpeg libavcodec library buffer overflow

CVE-2016-1528 concerns FFmpeg’s libavcodec with a heap-based buffer overflow caused by improper bounds checking. By convincing a victim to open a specially crafted file, an attacker could overflow a buffer and execute arbitrary code or cause a denial of service. The initial document describes the...

The vulnerability of the FFmpeg multimedia library, which allows a intruder to trigger a service failure or cause other effects

The vulnerability of the libswscale/swscaleunscaled.c function in the FFmpeg multimedia library arises due to buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure reading beyond the array bounds or other effects by using a specially created .cine file...