CVE-2013-0844: Undefined Security Weakness

Off-by-one error in the adpcmdecodeframe function in libavcodec/adpcm.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via crafted DK4 data, which triggers an out-of-bounds array access...

CVE-2013-0856: Improper Input Validation

The lpcprediction function in libavcodec/alac.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted Apple Lossless Audio Codec ALAC data, related to a large nbsamples value...

CVE-2013-0855: Undefined Security Weakness

Integer overflow in the alacdecodeclose function in libavcodec/alac.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a large number of samples per frame in Apple Lossless Audio Codec ALAC data, which triggers an out-of-bounds array access...

CVE-2013-0859: Undefined Security Weakness

The adddoublesmetadata function in libavcodec/tiff.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a negative or zero count value in a TIFF image, which triggers an out-of-bounds array access...

CVE-2013-0858: Undefined Security Weakness

The atrac3decodeinit function in libavcodec/atrac3.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via ATRAC3 data with the joint stereo coding mode set and fewer than two channels...

CVE-2013-0849: Improper Input Validation

The roqdecodeinit function in libavcodec/roqvideodec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted 1 width or 2 height dimension that is not a multiple of sixteen in id RoQ video data...

CVE-2013-0853: Undefined Security Weakness

The wavpackdecodeframe function in libavcodec/wavpack.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted WavPack data, which triggers an out-of-bounds array access, possibly due to an off-by-one error...

CVE-2013-0854: Improper Input Validation

The mjpegdecodescanprogressiveac function in libavcodec/mjpegdec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted MJPEG data...

CVE-2013-0846: Improper Input Validation

Array index error in the qdm2decodesuperblock function in libavcodec/qdm2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted QDM2 data, which triggers an out-of-bounds array access...

PT-2013-2657

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1 Description The issue is related to the lpc prediction function in libavcodec/alac.c, which can be exploited by remote attackers through crafted Apple Lossless Audio Codec ALAC data. This is specifically related to...

PT-2013-2652

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1 Description The issue is related to the decode init function in libavcodec/huffyuv.c, which allows remote attackers to have an unspecified impact via a crafted width in huffyuv data. This occurs when the predictor ...

PT-2013-2654

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1 Description The issue is related to the decode frame function in libavcodec/eamad.c, which can be exploited by remote attackers through crafted Electronic Arts Madcow video data. This exploitation triggers an...

PT-2013-2658

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1 Description The issue is related to the add doubles metadata function in libavcodec/tiff.c, which can be exploited by remote attackers via a negative or zero count value in a TIFF image. This triggers an...

PT-2013-2650

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1 Description The issue is related to an array index error in the qdm2 decode super block function, located in libavcodec/qdm2.c. This error can be triggered by remote attackers via crafted QDM2 data, leading to an...

PT-2013-2649

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.0.4 Description The issue allows remote attackers to have an unspecified impact via a crafted block length, which triggers an out-of-bounds write in the libavcodec/alsdec.c file. Recommendations For versions prior to...

PT-2013-2655

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1 Description The issue is related to the parse picture segment function in libavcodec/pgssubdec.c, which can be exploited by remote attackers using crafted RLE data. This triggers an out-of-bounds array access,...

PT-2013-2656

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1 Description The issue is related to an integer overflow in the alac decode close function, which can be triggered by a large number of samples per frame in Apple Lossless Audio Codec ALAC data. This leads to an...

DEBIAN-CVE-2013-0867

The decodesliceheader function in libavcodec/h264.c in FFmpeg before 1.1.2 does not properly check when the pixel format changes, which allows remote attackers to have unspecified impact via crafted H.264 video data, related to an out-of-bounds array access...

CVE-2013-0867

The decodesliceheader function in libavcodec/h264.c in FFmpeg before 1.1.2 does not properly check when the pixel format changes, which allows remote attackers to have unspecified impact via crafted H.264 video data, related to an out-of-bounds array access...

CVE-2013-0869

The fieldend function in libavcodec/h264.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted H.264 data, related to an SPS and slice mismatch and an out-of-bounds array access...