Lucene search
+L

10841 matches found

OSV
OSV
•added 2017/12/12 1:29 a.m.•10 views

DEBIAN-CVE-2017-17555

The swriaudioconvert function in audioconvert.c in FFmpeg libswresample through 3.0.101, as used in FFmpeg 3.4.1, aubio 0.4.6, and other products, allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted audio file...

6.5CVSS6.8AI score0.01055EPSS
SaveExploits0References1
OSV
OSV
•added 2017/12/12 1:29 a.m.•33 views

CVE-2017-17555

The swriaudioconvert function in audioconvert.c in FFmpeg libswresample through 3.0.101, as used in FFmpeg 3.4.1, aubio 0.4.6, and other products, allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted audio file...

6.5CVSS6.3AI score
SaveExploits0References2
Mend
Mend
•added 2017/12/12 1:00 a.m.•2 views

CVE-2017-17555

The swriaudioconvert function in audioconvert.c in FFmpeg libswresample through 3.0.101, as used in FFmpeg 3.4.1, aubio 0.4.6, and other products, allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted audio file...

7.1CVSS0.01055EPSS
SaveExploits0References3
CVE
CVE
•added 2017/12/12 1:00 a.m.•171 views

CVE-2017-17555

CVE-2017-17555 affects FFmpeg libswresample (swri_audio_convert in audioconvert.c) up through 3.0.101 (used in FFmpeg 3.4.1 and aubio 0.4.6). It can trigger a NULL pointer dereference and application crash via a crafted audio file, enabling a remote DoS. Connected reports confirm the issue is fix...

6.5CVSS6.2AI score0.01055EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
•added 2017/12/12 1:00 a.m.•46 views

CVE-2017-17555

The swriaudioconvert function in audioconvert.c in FFmpeg libswresample through 3.0.101, as used in FFmpeg 3.4.1, aubio 0.4.6, and other products, allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted audio file...

7AI score0.01055EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2017/12/12 1:00 a.m.•56 views

CVE-2017-17555

The swriaudioconvert function in audioconvert.c in FFmpeg libswresample through 3.0.101, as used in FFmpeg 3.4.1, aubio 0.4.6, and other products, allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted audio file...

6.5CVSS6.8AI score0.01055EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2017/12/12 12:00 a.m.•3 views

PT-2017-14853

Name of the Vulnerable Software and Affected Versions FFmpeg libswresample versions prior to 3.0.102 FFmpeg versions prior to 3.4.2 aubio versions prior to 0.4.7 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application...

6.5CVSS0.01055EPSS
SaveExploits0References87
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/12/12 12:00 a.m.•5 views

CVE-2017-17555: NULL Pointer Dereference

The swriaudioconvert function in audioconvert.c in FFmpeg libswresample through 3.0.101, as used in FFmpeg 3.4.1, aubio 0.4.6, and other products, allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted audio file...

6.5CVSS6.8AI score0.01055EPSS
SaveExploits0References2
OSV
OSV
•added 2017/12/07 8:54 p.m.•19 views

MGASA-2017-0446 Updated ffmpeg packages fix security vulnerability

This update provides ffmpeg version 3.3.5, which fixes several security vulnerabilities and other bugs which were corrected upstream...

6.5CVSS7.3AI score0.01655EPSS
SaveExploits0References5
Mageia
Mageia
•added 2017/12/07 8:54 p.m.•47 views

Updated ffmpeg packages fix security vulnerability

This update provides ffmpeg version 3.3.5, which fixes several security vulnerabilities and other bugs which were corrected upstream...

6.5CVSS4AI score0.01655EPSS
SaveExploits0References4
CNVD
CNVD
•added 2017/12/04 12:00 a.m.•16 views

FFmpeg Denial of Service Vulnerability (CNVD-2017-36471)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'gmcmmx' function in the libavcodec/x86/mpegvideodsp.c file in FFmpeg version 3.4, which stems from the program failing to properly validate the lengt...

6.5CVSS6.8AI score0.01827EPSS
SaveExploits0References1
Veracode
Veracode
•added 2017/12/01 4:55 a.m.•19 views

Denial Of Service (DoS)

FFMPEG is vulnerable to denial of service DoS attacks. A malicious user can launch an attack by sending a malicious MPEG file to the gmcmmx function in libavcodec/x86/mpegvideodsp.c. Since it fails to validate the width and height of the input, it leads to integer signedness error and an...

6.5CVSS6.5AI score0.01827EPSS
SaveExploits0References5Affected Software2
UbuntuCve
UbuntuCve
•added 2017/11/30 9:29 p.m.•43 views

CVE-2017-17081

The gmcmmx function in libavcodec/x86/mpegvideodsp.c in FFmpeg 2.3 and 3.4 does not properly validate widths and heights, which allows remote attackers to cause a denial of service integer signedness error and out-of-array read via a crafted MPEG file...

6.5CVSS6.8AI score0.01827EPSS
SaveExploits0References2
NVD
NVD
•added 2017/11/30 9:29 p.m.•36 views

CVE-2017-17081

The gmcmmx function in libavcodec/x86/mpegvideodsp.c in FFmpeg 2.3 and 3.4 does not properly validate widths and heights, which allows remote attackers to cause a denial of service integer signedness error and out-of-array read via a crafted MPEG file...

6.5CVSS6.3AI score0.01827EPSS
SaveExploits0References5
Prion
Prion
•added 2017/11/30 9:29 p.m.•54 views

Integer overflow

The gmcmmx function in libavcodec/x86/mpegvideodsp.c in FFmpeg 2.3 and 3.4 does not properly validate widths and heights, which allows remote attackers to cause a denial of service integer signedness error and out-of-array read via a crafted MPEG file...

4.3CVSS6.2AI score0.01827EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2017/11/30 9:29 p.m.•14 views

DEBIAN-CVE-2017-17081

The gmcmmx function in libavcodec/x86/mpegvideodsp.c in FFmpeg 2.3 and 3.4 does not properly validate widths and heights, which allows remote attackers to cause a denial of service integer signedness error and out-of-array read via a crafted MPEG file...

6.5CVSS6.7AI score0.01827EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2017/11/30 9:00 p.m.•52 views

CVE-2017-17081

The gmcmmx function in libavcodec/x86/mpegvideodsp.c in FFmpeg 2.3 and 3.4 does not properly validate widths and heights, which allows remote attackers to cause a denial of service integer signedness error and out-of-array read via a crafted MPEG file...

7.3AI score0.01827EPSS
SaveExploits0References5
Mend
Mend
•added 2017/11/30 9:00 p.m.•4 views

CVE-2017-17081

The gmcmmx function in libavcodec/x86/mpegvideodsp.c in FFmpeg 2.3 and 3.4 does not properly validate widths and heights, which allows remote attackers to cause a denial of service integer signedness error and out-of-array read via a crafted MPEG file...

7.1CVSS0.01827EPSS
SaveExploits0References7
Debian CVE
Debian CVE
•added 2017/11/30 9:00 p.m.•58 views

CVE-2017-17081

The gmcmmx function in libavcodec/x86/mpegvideodsp.c in FFmpeg 2.3 and 3.4 does not properly validate widths and heights, which allows remote attackers to cause a denial of service integer signedness error and out-of-array read via a crafted MPEG file...

6.5CVSS6.4AI score0.01827EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2017/11/30 12:00 a.m.•4 views

PT-2017-14697

Name of the Vulnerable Software and Affected Versions FFmpeg versions 2.3 through 3.4 Description The issue is related to the gmc mmx function in libavcodec/x86/mpegvideodsp.c, which does not properly validate widths and heights. This allows remote attackers to cause a denial of service via a...

8.8CVSS0.02568EPSS
SaveExploits0References78
Rows per page
Query Builder