[SECURITY] [DSA 3957-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3957-1 [email protected] https://www.debian.org/security/ Luciano Bello August 28, 2017 https://www.debian.org/security/faq -...

Design/Logic Flaw

The 'vp3decodeframe' function in FFmpeg 1.1.4 moves threads check out of header packet type check...

Design/Logic Flaw

Unspecified vulnerability in FFMPEG 0.10 allows remote attackers to cause a denial of service...

CVE-2012-2805

Unspecified vulnerability in FFMPEG 0.10 allows remote attackers to cause a denial of service...

UBUNTU-CVE-2012-2805

Unspecified vulnerability in FFMPEG 0.10 allows remote attackers to cause a denial of service...

DEBIAN-CVE-2012-2805

Unspecified vulnerability in FFMPEG 0.10 allows remote attackers to cause a denial of service...

CVE-2012-2805

Unspecified vulnerability in FFMPEG 0.10 allows remote attackers to cause a denial of service...

CVE-2013-0870

The 'vp3decodeframe' function in FFmpeg 1.1.4 moves threads check out of header packet type check...

CVE-2012-2805

Unspecified vulnerability in FFMPEG 0.10 allows remote attackers to cause a denial of service...

CVE-2013-0870

The 'vp3decodeframe' function in FFmpeg 1.1.4 moves threads check out of header packet type check...

CVE-2013-0870

The 'vp3decodeframe' function in FFmpeg 1.1.4 moves threads check out of header packet type check...

CVE-2012-2805

Unspecified vulnerability in FFMPEG 0.10 allows remote attackers to cause a denial of service...

CVE-2013-0870

The CVE-2013-0870 issue affects FFmpeg 1.1.4, where the vp3_decode_frame function causes the thread check to move out of the header packet type check. This is described as a vulnerability in FFmpeg with a CVSS v2 base score of 7.5 (HIGH) and CVSS v3 base score of 9.8 (CRITICAL) with network attac...

CVE-2012-2805

Technical details for CVE-2012-2805 are not publicly available in the provided documents. No affected version, impact, or remediation specifics are given here. Monitor for updates.

CVE-2013-0870

The 'vp3decodeframe' function in FFmpeg 1.1.4 moves threads check out of header packet type check...

CVE-2012-2805

Unspecified vulnerability in FFMPEG 0.10 allows remote attackers to cause a denial of service...

ffmpeg: Index-out-of-bounds in hls_transform_unit

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4736774054084608 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDHEVCfuzzer Fuzz target binary: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerubsanffmpeguntrusted Platform Id: linux Crash Type:...

DSA-3957-1 ffmpeg - security update

Bulletin has no description...

PT-2017-5115

Name of the Vulnerable Software and Affected Versions: FFMPEG version 0.10 Description: The issue allows remote attackers to cause a denial of service. Recommendations: For FFMPEG version 0.10, at the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2017-5442

Name of the Vulnerable Software and Affected Versions: FFmpeg version 1.1.4 Description: The issue is related to the vp3 decode frame function, which incorrectly moves threads check out of header packet type check. Recommendations: For FFmpeg version 1.1.4, consider updating to a newer version th...