CVE-2013-7014

CVE-2013-7014: FFmpeg (libavcodec/pngdsp.c, function add_bytes_l2_c) contains a signedness error that can allow remote attackers to trigger an out-of-bounds access via crafted PNG data, leading to denial of service or other unspecified impact. Affected affected version: FFmpeg before 2.1. The iss...

CVE-2013-7024

The jpeg2000decodetile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not consider the component number in certain calculations, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JPEG2000 dat...

CVE-2011-4351

Buffer overflow in FFmpeg before 0.5.6, 0.6.x before 0.6.4, 0.7.x before 0.7.8, and 0.8.x before 0.8.8 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2011-4351

Buffer overflow in FFmpeg before 0.5.6, 0.6.x before 0.6.4, 0.7.x before 0.7.8, and 0.8.x before 0.8.8 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2013-7019

The getcox function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not properly validate the reduction factor, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JPEG2000 data...

PT-2013-6242

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the g2m init buffers function in libavcodec/g2meet.c, which does not properly allocate memory for tiles. This can be exploited by remote attackers using crafted Go2Webinar data,...

PT-2013-1410

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.10 Description A double free vulnerability exists in the vp3 update thread context function in libavcodec/vp3.c, which can be exploited by remote attackers using crafted vp3 data. The impact of this issue is...

PT-2013-6244

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the jpeg2000 decode tile function in libavcodec/jpeg2000dec.c, which does not consider the component number in certain calculations. This allows remote attackers to cause a denia...

PT-2013-6235

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the flashsv decode frame function in libavcodec/flashsv.c, which does not properly validate a certain height value. This allows remote attackers to cause a denial of service...

PT-2013-6236

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the get siz function in libavcodec/jpeg2000dec.c, which does not ensure the expected sample separation. This allows remote attackers to cause a denial of service out-of-bounds...

PT-2013-6239

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the get cox function in libavcodec/jpeg2000dec.c, which does not properly validate the reduction factor. This allows remote attackers to cause a denial of service out-of-bounds...

CVE-2011-3944: Undefined Security Weakness

The smackerdecodeheadertree function in libavcodec/smacker.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Smacker data...

PT-2013-1414

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.10 Description The issue is related to the smacker decode header tree function in libavcodec/smacker.c, which can be exploited by remote attackers using crafted Smacker data. Recommendations For versions prior to 0.1...

PT-2013-1413

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.10 Description The issue is related to the decode mb function in libavcodec/error resilience.c, which allows remote attackers to have an unspecified impact via vectors related to an uninitialized block index. This...

PT-2013-1417

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.10 Description The issue is related to the dirac decode data unit function in libavcodec/diracdec.c, which can be exploited by remote attackers through a crafted value in the reference pictures number. This can have ...

PT-2013-6234

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to an integer signedness error in the add bytes l2 c function in libavcodec/pngdsp.c, which can be triggered by crafted PNG data. This error can cause a denial of service due to...

CVE-2011-3949: Undefined Security Weakness

The diracunpackidwtparams function in libavcodec/diracdec.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Dirac data...

CVE-2013-7015: Improper Input Validation

The flashsvdecodeframe function in libavcodec/flashsv.c in FFmpeg before 2.1 does not properly validate a certain height value, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted Flash Screen Video data...

CVE-2011-4351: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in FFmpeg before 0.5.6, 0.6.x before 0.6.4, 0.7.x before 0.7.8, and 0.8.x before 0.8.8 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2013-7016: Improper Restriction of Operations within the Bounds of a Memory Buffer

The getsiz function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not ensure the expected sample separation, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JPEG2000 data...