PT-2013-6242

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the g2m init buffers function in libavcodec/g2meet.c, which does not properly allocate memory for tiles. This can be exploited by remote attackers using crafted Go2Webinar data,...

PT-2013-6237

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue allows remote attackers to cause a denial of service or possibly have other impacts via crafted JPEG2000 data in the libavcodec/jpeg2000.c file. Recommendations For versions prior to 2.1, upda...

PT-2013-6232

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the get siz function in libavcodec/jpeg2000dec.c, which does not prevent attempts to use non-zero image offsets. This allows remote attackers to cause a denial of service...

PT-2013-6243

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the ff combine frame function in libavcodec/parser.c, which does not properly handle certain memory-allocation errors. This can be exploited by remote attackers using crafted dat...

PT-2013-6244

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the jpeg2000 decode tile function in libavcodec/jpeg2000dec.c, which does not consider the component number in certain calculations. This allows remote attackers to cause a denia...

PT-2013-6239

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the get cox function in libavcodec/jpeg2000dec.c, which does not properly validate the reduction factor. This allows remote attackers to cause a denial of service out-of-bounds...

PT-2013-1410

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.10 Description A double free vulnerability exists in the vp3 update thread context function in libavcodec/vp3.c, which can be exploited by remote attackers using crafted vp3 data. The impact of this issue is...

PT-2013-6235

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the flashsv decode frame function in libavcodec/flashsv.c, which does not properly validate a certain height value. This allows remote attackers to cause a denial of service...

PT-2013-6230

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to multiple integer signedness errors in the libavcodec/dsputil.c file. This can be exploited by remote attackers using crafted data, potentially leading to a denial of service due ...

PT-2013-1411

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.10 Description The issue is related to the codec get buffer function in ffmpeg.c, which can be exploited by remote attackers through crafted image size vectors, potentially having an unspecified impact. Recommendatio...

PT-2013-1413

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.10 Description The issue is related to the decode mb function in libavcodec/error resilience.c, which allows remote attackers to have an unspecified impact via vectors related to an uninitialized block index. This...

PT-2013-1417

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.10 Description The issue is related to the dirac decode data unit function in libavcodec/diracdec.c, which can be exploited by remote attackers through a crafted value in the reference pictures number. This can have ...

PT-2013-6231

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the read header function in libavcodec/ffv1dec.c, which does not prevent changes to global parameters. This allows remote attackers to cause a denial of service out-of-bounds arr...

CVE-2011-3946: Undefined Security Weakness

The ffh264decodesei function in libavcodec/h264sei.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Supplemental enhancement information SEI data, which triggers an infinite loop...

CVE-2011-3934: Undefined Security Weakness

Double free vulnerability in the vp3updatethreadcontext function in libavcodec/vp3.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted vp3 data...

CVE-2013-7015: Improper Input Validation

The flashsvdecodeframe function in libavcodec/flashsv.c in FFmpeg before 2.1 does not properly validate a certain height value, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted Flash Screen Video data...

CVE-2011-3949: Undefined Security Weakness

The diracunpackidwtparams function in libavcodec/diracdec.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Dirac data...

CVE-2013-7020: Improper Restriction of Operations within the Bounds of a Memory Buffer

The readheader function in libavcodec/ffv1dec.c in FFmpeg before 2.1 does not properly enforce certain bit-count and colorspace constraints, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted FFV1 data...

CVE-2013-7016: Improper Restriction of Operations within the Bounds of a Memory Buffer

The getsiz function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not ensure the expected sample separation, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JPEG2000 data...

CVE-2013-7021: Undefined Security Weakness

The filterframe function in libavfilter/vffps.c in FFmpeg before 2.1 does not properly ensure the availability of FIFO content, which allows remote attackers to cause a denial of service double free or possibly have unspecified other impact via crafted data...