PT-2013-2673

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.3 Description The issue is related to the old codec37 function in libavcodec/sanm.c, which allows remote attackers to have an impact via crafted LucasArts Smush data. This is due to an out-of-bounds array access wh...

PT-2013-2670

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.3 Description The issue is related to the doubles2str and shorts2str functions in libavcodec/tiff.c, which allow remote attackers to have an unspecified impact via a crafted TIFF image. This is due to an...

PT-2013-4924

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.0.1 Description The issue is related to a crafted "plane" in libavfilter, which triggers an out-of-bounds heap write. This can be exploited remotely. Recommendations For versions prior to 2.0.1, update to version 2.0...

PT-2013-2664

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.0.4 FFmpeg versions 1.1.x prior to 1.1.2 Description The issue allows remote attackers to have an unspecified impact via a large 1 cbp0 or 2 cbpz chunk in Westwood Studios VQA Video file, which triggers an...

PT-2013-2667

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.2 Description The issue is related to an out-of-bounds array access in the field end function in libavcodec/h264.c, which can be triggered by crafted H.264 data, specifically when there is an SPS and slice mismatch...

PT-2013-2671

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.3 Description The issue is related to an out-of-bounds array access in the ff add png paeth prediction function, which can be exploited by remote attackers using a crafted PNG image. Recommendations For versions...

PT-2013-4926

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.0.1 Description The issue is related to the av reallocp array function in libavutil/mem.c, which has an unspecified impact and remote vectors related to a "wrong return code" and a resultant NULL pointer dereference...

PT-2013-2674

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.3 Description The issue is related to an out-of-bounds array access in the advance line function in libavcodec/targa.c, which can be triggered by crafted Targa image data. This allows remote attackers to have an...

CVE-2013-0876: Undefined Security Weakness

Multiple integer overflows in the 1 oldcodec37 and 2 oldcodec47 functions in libavcodec/sanm.c in FFmpeg before 1.1.3 allow remote attackers to have an unspecified impact via crafted LucasArts Smush data, which triggers an out-of-bounds array access...

CVE-2013-0867: Improper Input Validation

The decodesliceheader function in libavcodec/h264.c in FFmpeg before 1.1.2 does not properly check when the pixel format changes, which allows remote attackers to have unspecified impact via crafted H.264 video data, related to an out-of-bounds array access...

CVE-2013-0864: Undefined Security Weakness

The gifcopyimgrect function in libavcodec/gifdec.c in FFmpeg before 1.1.2 performs an incorrect calculation for an "end pointer," which allows remote attackers to have an unspecified impact via crafted GIF data that triggers an out-of-bounds array access...

PT-2013-4925

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.0.1 Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds heap write, via a G2M4 encoded file. This is due to a problem in the kempf decode tile function...

CVE-2013-0873: Improper Input Validation

The readheader function in libavcodec/shorten.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid channel count, related to "freeing invalid addresses."...

CVE-2013-4265: Undefined Security Weakness

The avreallocparray function in libavutil/mem.c in FFmpeg before 2.0.1 has an unspecified impact and remote vectors related to a "wrong return code" and a resultant NULL pointer dereference...

CVE-2013-0878: Improper Restriction of Operations within the Bounds of a Memory Buffer

The advanceline function in libavcodec/targa.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via crafted Targa image data, related to an out-of-bounds array access...

CVE-2013-0877: Improper Restriction of Operations within the Bounds of a Memory Buffer

The oldcodec37 function in libavcodec/sanm.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via crafted LucasArts Smush data that has a large size when decoded, related to an out-of-bounds array access...

CVE-2013-0875: Undefined Security Weakness

The ffaddpngpaethprediction function in libavcodec/pngdec.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via a crafted PNG image, related to an out-of-bounds array access...

CVE-2013-4263: Improper Restriction of Operations within the Bounds of a Memory Buffer

libavfilter in FFmpeg before 2.0.1 has unspecified impact and remote vectors related to a crafted "plane," which triggers an out-of-bounds heap write...

PT-2013-2661

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.2 Description The issue is caused by multiple integer overflows in the process frame obj function, which can be triggered by crafted image dimensions in LucasArts Smush video data. This leads to an out-of-bounds...

PT-2013-2672

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.3 Description The issue is related to multiple integer overflows in the old codec37 and old codec47 functions in libavcodec/sanm.c, which can be triggered by crafted LucasArts Smush data. This leads to an...