10840 matches found
PT-2013-6240
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the read header function in libavcodec/ffv1dec.c, which does not properly enforce certain bit-count and colorspace constraints. This allows remote attackers to cause a denial of...
PT-2013-6241
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the filter frame function in libavfilter/vf fps.c, which does not properly ensure the availability of FIFO content. This allows remote attackers to cause a denial of service,...
PT-2013-1416
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.10 Description The issue is related to the dirac unpack idwt params function in libavcodec/diracdec.c, which can be exploited by remote attackers using crafted Dirac data. This may have an unspecified impact on the...
PT-2013-1411
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.10 Description The issue is related to the codec get buffer function in ffmpeg.c, which can be exploited by remote attackers through crafted image size vectors, potentially having an unspecified impact. Recommendatio...
PT-2013-6231
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the read header function in libavcodec/ffv1dec.c, which does not prevent changes to global parameters. This allows remote attackers to cause a denial of service out-of-bounds arr...
PT-2013-6243
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the ff combine frame function in libavcodec/parser.c, which does not properly handle certain memory-allocation errors. This can be exploited by remote attackers using crafted dat...
PT-2013-6230
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to multiple integer signedness errors in the libavcodec/dsputil.c file. This can be exploited by remote attackers using crafted data, potentially leading to a denial of service due ...
CVE-2011-3934: Undefined Security Weakness
Double free vulnerability in the vp3updatethreadcontext function in libavcodec/vp3.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted vp3 data...
PT-2013-6229
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the rpza decode stream function in libavcodec/rpza.c, which does not properly maintain a pointer to pixel data. This allows remote attackers to cause a denial of service...
PT-2013-6233
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the g2m init buffers function in libavcodec/g2meet.c, which uses an incorrect ordering of arithmetic operations. This can be exploited by remote attackers using crafted Go2Webina...
PT-2013-6238
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue allows remote attackers to cause a denial of service or possibly have other impacts via crafted JPEG2000 data, due to the lack of validation of code-block dimension values in...
PT-2013-6228
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the decode slice header function in libavcodec/h264.c, which incorrectly relies on a certain droppable field. This allows remote attackers to cause a denial of service deadlock o...
PT-2013-6237
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue allows remote attackers to cause a denial of service or possibly have other impacts via crafted JPEG2000 data in the libavcodec/jpeg2000.c file. Recommendations For versions prior to 2.1, upda...
CVE-2013-7024: Improper Restriction of Operations within the Bounds of a Memory Buffer
The jpeg2000decodetile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not consider the component number in certain calculations, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JPEG2000 dat...
CVE-2013-0859
The adddoublesmetadata function in libavcodec/tiff.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a negative or zero count value in a TIFF image, which triggers an out-of-bounds array access...
CVE-2013-0858
The atrac3decodeinit function in libavcodec/atrac3.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via ATRAC3 data with the joint stereo coding mode set and fewer than two channels...
DEBIAN-CVE-2013-0850
The decodesliceheader function in libavcodec/h264.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted H.264 data, which triggers an out-of-bounds array access...
DEBIAN-CVE-2013-0849
The roqdecodeinit function in libavcodec/roqvideodec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted 1 width or 2 height dimension that is not a multiple of sixteen in id RoQ video data...