9159 matches found
CVE-2013-0846
The CVE-2013-0846 issue affects FFmpeg's libavcodec/qdm2.c, where an array index error in qdm2_decode_super_block can trigger an out-of-bounds access via crafted QDM2 data. This vulnerability is present in FFmpeg before 1.1 and can allow a remote attacker to impact confidentiality, integrity, and...
CVE-2013-0859
The CVE concerns FFmpeg (libavcodec/tiff.c) and the add_doubles_metadata function. Before version 1.1, a negative or zero count value in a TIFF image can cause an out-of-bounds array access, granting remote attackers an unspecified impact. The documents confirm the vulnerable component and the un...
CVE-2013-0853
CVE-2013-0853 refers to a vulnerability in FFmpeg/libav where the wavpack_decode_frame function in libavcodec/wavpack.c could be triggered by crafted WavPack data, causing an out-of-bounds array access (likely due to an off-by-one error). The issue is exploitable remotely and is due to memory cor...
CVE-2013-0856
The vulnerability CVE-2013-0856 affects FFmpeg’s libavcodec ALAC decoding, specifically the lpc_prediction function in alac.c. Before FFmpeg 1.1, crafted ALAC data (related to a large nb_samples) can lead to a remote impact. The issue originates in the ALAC data handling within the lpc_prediction...
CVE-2013-0852
The parsepicturesegment function in libavcodec/pgssubdec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted RLE data, which triggers an out-of-bounds array access...
CVE-2013-0858
The atrac3decodeinit function in libavcodec/atrac3.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via ATRAC3 data with the joint stereo coding mode set and fewer than two channels...
CVE-2013-0855
Integer overflow in the alacdecodeclose function in libavcodec/alac.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a large number of samples per frame in Apple Lossless Audio Codec ALAC data, which triggers an out-of-bounds array access...
CVE-2013-0849
The roqdecodeinit function in libavcodec/roqvideodec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted 1 width or 2 height dimension that is not a multiple of sixteen in id RoQ video data...
CVE-2013-0852
The parsepicturesegment function in libavcodec/pgssubdec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted RLE data, which triggers an out-of-bounds array access...
CVE-2013-0844
Off-by-one error in the adpcmdecodeframe function in libavcodec/adpcm.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via crafted DK4 data, which triggers an out-of-bounds array access...
CVE-2013-0848
The decodeinit function in libavcodec/huffyuv.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted width in huffyuv data with the predictor set to median and the colorspace set to YUV422P, which triggers an out-of-bounds array access...
CVE-2013-0853
The wavpackdecodeframe function in libavcodec/wavpack.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted WavPack data, which triggers an out-of-bounds array access, possibly due to an off-by-one error...
CVE-2013-0859
The adddoublesmetadata function in libavcodec/tiff.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a negative or zero count value in a TIFF image, which triggers an out-of-bounds array access...
CVE-2013-0846
Array index error in the qdm2decodesuperblock function in libavcodec/qdm2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted QDM2 data, which triggers an out-of-bounds array access...
CVE-2013-0845
The CVE-2013-0845 issue affects FFmpeg’s libavcodec/alsdec.c (FFmpeg before 1.0.4). A crafted block length can cause an out-of-bounds write, enabling remote attackers to trigger an unspecified impact. The documentation does not provide exploit details. Remediation: upgrade FFmpeg to version 1.0.4...
CVE-2013-0858
CVE-2013-0858 affects FFmpeg/libav: the atrac3_decode_init function in libavcodec/atrac3.c, prior to FFmpeg 1.0.4, allows remote attackers to induce an unspecified impact through ATRAC3 data when the joint stereo coding mode is used and there are fewer than two channels. The vulnerability is repo...
CVE-2013-0847
The vulnerability CVE-2013-0847 affects FFmpeg (libavformat/id3v2.c, function ff_id3v2_parse) in builds before 1.1, where crafted ID3v2 header data can trigger an out-of-bounds array access, allowing remote attackers to impact confidentiality/integrity/availability. Several connected records (NVD...
CVE-2013-0851
The decodeframe function in libavcodec/eamad.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted Electronic Arts Madcow video data, which triggers an out-of-bounds array access...
CVE-2013-0855
Integer overflow in the alacdecodeclose function in libavcodec/alac.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a large number of samples per frame in Apple Lossless Audio Codec ALAC data, which triggers an out-of-bounds array access...