Heap overflow

Heap-based buffer overflow in the MPVframestart function in libavcodec/mpegvideo.c in FFmpeg before 0.9.1, when the lowres option is enabled, allows remote attackers to cause a denial of service application crash via a crafted H263 media file. NOTE: this vulnerability exists because of a regressi...

Heap overflow

Heap-based buffer overflow in the wssnddecodeframe function in libavcodec/ws-snd1.c in FFmpeg 0.9.1 allows remote attackers to cause a denial of service application crash via a crafted media file, related to an incorrect calculation, aka "wrong samples count."...

CVE-2012-0857

Multiple buffer overflows in the getqcx function in the J2K decoder j2kdec.c in libavcode in FFmpeg before 0.9.1 allow remote attackers to cause a denial of service application crash via unspecified vectors...

CVE-2012-0850

The sbrqmfsynthesis function in libavcodec/aacsbr.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service application crash via a crafted mpg file that triggers memory corruption involving the voff variable, probably a buffer underflow...

CVE-2012-0850

The CVE-2012-0850 entry is supported by concrete details across connected sources: FFmpeg/libavcodec in FFmpeg before 0.9.1 contains a flaw in sbr_qmf_synthesis (libavcodec/aacsbr.c) that can trigger memory corruption via crafted MPEGs, likely a buffer underflow, leading to application crashes an...

CVE-2012-0848

Heap-based buffer overflow in the wssnddecodeframe function in libavcodec/ws-snd1.c in FFmpeg 0.9.1 allows remote attackers to cause a denial of service application crash via a crafted media file, related to an incorrect calculation, aka "wrong samples count."...

CVE-2012-0857

Multiple buffer overflows in the getqcx function in the J2K decoder j2kdec.c in libavcode in FFmpeg before 0.9.1 allow remote attackers to cause a denial of service application crash via unspecified vectors...

CVE-2012-0856

FFmpeg prior to 0.9.1 is affected by a heap-based buffer overflow in MPV_frame_start (libavcodec/mpegvideo.c) when the lowres option is enabled. The vulnerability allows remote attackers to crash the application via a crafted H263 video file; it is noted as a regression-related issue. No specific...

CVE-2012-0848

The CVE-2012-0848 vulnerability affects FFmpeg 0.9.1, specifically a heap-based buffer overflow in libavcodec/ws-snd1.c (ws_snd_decode_frame) caused by an incorrect calculation of the samples count. This allows a remote attacker to crash the application by feeding a crafted media file, resulting ...

CVE-2012-0857

FFmpeg before 0.9.1 is affected by CVE-2012-0857 due to multiple buffer overflows in the get_qcx function (j2kdec.c) of the libavcodec library, enabling remote attackers to cause an application crash (denial of service). The vulnerability is triggered by unspecified vectors. The provided document...

CVE-2012-0857

Multiple buffer overflows in the getqcx function in the J2K decoder j2kdec.c in libavcode in FFmpeg before 0.9.1 allow remote attackers to cause a denial of service application crash via unspecified vectors...

CVE-2012-0847

Vulnerability: FFmpeg prior to 0.9.1 contains a heap-based buffer overflow in avfilter_filter_samples (libavfilter/avfilter.c). This can allow remote attackers to crash the application via crafted media files. Impact is denial of service. No exploitation details are provided in the connected docu...

CVE-2012-0854

The dpcmdecodeframe function in libavcodec/dpcm.c in FFmpeg before 0.9.1 does not use the proper pointer after an audio API change, which allows remote attackers to cause a denial of service application crash via unspecified vectors, which triggers a heap-based buffer overflow...

CVE-2012-0854

The vulnerability CVE-2012-0854 affects FFmpeg’s libavcodec/dpcm.c (dpcm_decode_frame) in versions before 0.9.1. The issue arises from using an improper pointer after an audio API change, enabling remote attackers to trigger a denial of service (application crash) through a heap-based buffer over...

CVE-2012-0854

The dpcmdecodeframe function in libavcodec/dpcm.c in FFmpeg before 0.9.1 does not use the proper pointer after an audio API change, which allows remote attackers to cause a denial of service application crash via unspecified vectors, which triggers a heap-based buffer overflow...

CVE-2012-0856

Heap-based buffer overflow in the MPVframestart function in libavcodec/mpegvideo.c in FFmpeg before 0.9.1, when the lowres option is enabled, allows remote attackers to cause a denial of service application crash via a crafted H263 media file. NOTE: this vulnerability exists because of a regressi...

CVE-2012-0847

Heap-based buffer overflow in the avfilterfiltersamples function in libavfilter/avfilter.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service application crash via a crafted media file...

CVE-2012-0848

Heap-based buffer overflow in the wssnddecodeframe function in libavcodec/ws-snd1.c in FFmpeg 0.9.1 allows remote attackers to cause a denial of service application crash via a crafted media file, related to an incorrect calculation, aka "wrong samples count."...

CVE-2012-0856

Heap-based buffer overflow in the MPVframestart function in libavcodec/mpegvideo.c in FFmpeg before 0.9.1, when the lowres option is enabled, allows remote attackers to cause a denial of service application crash via a crafted H263 media file. NOTE: this vulnerability exists because of a regressi...

CVE-2012-0853

The decodeTonalComponents function in the Actrac3 codec atrac3.c in libavcodec in FFmpeg 0.7.x before 0.7.12, and 0.8.x before 0.8.11; and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service infinite loop...