PT-2013-6241

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the filter frame function in libavfilter/vf fps.c, which does not properly ensure the availability of FIFO content. This allows remote attackers to cause a denial of service,...

PT-2013-1416

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.10 Description The issue is related to the dirac unpack idwt params function in libavcodec/diracdec.c, which can be exploited by remote attackers using crafted Dirac data. This may have an unspecified impact on the...

CVE-2013-7010: Undefined Security Weakness

Multiple integer signedness errors in libavcodec/dsputil.c in FFmpeg before 2.1 allow remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted data...

PT-2013-6229

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the rpza decode stream function in libavcodec/rpza.c, which does not properly maintain a pointer to pixel data. This allows remote attackers to cause a denial of service...

PT-2013-6233

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the g2m init buffers function in libavcodec/g2meet.c, which uses an incorrect ordering of arithmetic operations. This can be exploited by remote attackers using crafted Go2Webina...

PT-2013-6238

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue allows remote attackers to cause a denial of service or possibly have other impacts via crafted JPEG2000 data, due to the lack of validation of code-block dimension values in...

PT-2013-6234

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to an integer signedness error in the add bytes l2 c function in libavcodec/pngdsp.c, which can be triggered by crafted PNG data. This error can cause a denial of service due to...

PT-2013-6228

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the decode slice header function in libavcodec/h264.c, which incorrectly relies on a certain droppable field. This allows remote attackers to cause a denial of service deadlock o...

PT-2013-6237

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue allows remote attackers to cause a denial of service or possibly have other impacts via crafted JPEG2000 data in the libavcodec/jpeg2000.c file. Recommendations For versions prior to 2.1, upda...

CVE-2013-0859

The adddoublesmetadata function in libavcodec/tiff.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a negative or zero count value in a TIFF image, which triggers an out-of-bounds array access...

CVE-2013-0849

The roqdecodeinit function in libavcodec/roqvideodec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted 1 width or 2 height dimension that is not a multiple of sixteen in id RoQ video data...

DEBIAN-CVE-2013-0849

The roqdecodeinit function in libavcodec/roqvideodec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted 1 width or 2 height dimension that is not a multiple of sixteen in id RoQ video data...

CVE-2013-0858

The atrac3decodeinit function in libavcodec/atrac3.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via ATRAC3 data with the joint stereo coding mode set and fewer than two channels...

CVE-2013-0845

libavcodec/alsdec.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via a crafted block length, which triggers an out-of-bounds write...

CVE-2013-0846

Array index error in the qdm2decodesuperblock function in libavcodec/qdm2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted QDM2 data, which triggers an out-of-bounds array access...

CVE-2013-0847

The ffid3v2parse function in libavformat/id3v2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via ID3v2 header data, which triggers an out-of-bounds array access...

CVE-2013-0848

The decodeinit function in libavcodec/huffyuv.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted width in huffyuv data with the predictor set to median and the colorspace set to YUV422P, which triggers an out-of-bounds array access...

CVE-2013-0852

The parsepicturesegment function in libavcodec/pgssubdec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted RLE data, which triggers an out-of-bounds array access...

CVE-2013-0853

The wavpackdecodeframe function in libavcodec/wavpack.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted WavPack data, which triggers an out-of-bounds array access, possibly due to an off-by-one error...

CVE-2013-0855

Integer overflow in the alacdecodeclose function in libavcodec/alac.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a large number of samples per frame in Apple Lossless Audio Codec ALAC data, which triggers an out-of-bounds array access...