PT-2013-1097

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.0.4 FFmpeg versions 1.1.x prior to 1.1.2 Description The issue is related to the aac decode init function in libavcodec/aacdec.c, which allows remote attackers to have an unspecified impact via a large number of...

PT-2013-2669

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.3 Description The issue is related to the read header function in libavcodec/shorten.c, which allows remote attackers to have an unspecified impact via an invalid channel count. This is related to "freeing invalid...

PT-2013-2674

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.3 Description The issue is related to an out-of-bounds array access in the advance line function in libavcodec/targa.c, which can be triggered by crafted Targa image data. This allows remote attackers to have an...

PT-2013-2659

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.0.4 FFmpeg versions 1.1.x prior to 1.1.1 Description The issue arises from the ff er frame end function in libavcodec/error resilience.c, which fails to properly verify that a frame is fully initialized. This allows...

PT-2013-2664

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.0.4 FFmpeg versions 1.1.x prior to 1.1.2 Description The issue allows remote attackers to have an unspecified impact via a large 1 cbp0 or 2 cbpz chunk in Westwood Studios VQA Video file, which triggers an...

PT-2013-2663

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.2 Description The issue is related to an incorrect calculation in the gif copy img rect function, which can lead to an out-of-bounds array access when processing crafted GIF data. This can potentially allow remote...

PT-2013-2671

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.3 Description The issue is related to an out-of-bounds array access in the ff add png paeth prediction function, which can be exploited by remote attackers using a crafted PNG image. Recommendations For versions...

PT-2013-2666

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.2 Description The issue is related to an out-of-bounds write in the libavcodec/huffyuvdec.c file, which can be triggered by crafted Huffyuv data. This is also related to unchecked return codes from the init vlc...

PT-2013-2670

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.3 Description The issue is related to the doubles2str and shorts2str functions in libavcodec/tiff.c, which allow remote attackers to have an unspecified impact via a crafted TIFF image. This is due to an...

PT-2013-4924

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.0.1 Description The issue is related to a crafted "plane" in libavfilter, which triggers an out-of-bounds heap write. This can be exploited remotely. Recommendations For versions prior to 2.0.1, update to version 2.0...

PT-2013-4926

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.0.1 Description The issue is related to the av reallocp array function in libavutil/mem.c, which has an unspecified impact and remote vectors related to a "wrong return code" and a resultant NULL pointer dereference...

PT-2013-2668

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.3 Description The issue is related to the swr init function in libswresample/swresample.c, which allows remote attackers to have an unspecified impact via an invalid or unsupported input or output channel layout...

CVE-2013-0862: Undefined Security Weakness

Multiple integer overflows in the processframeobj function in libavcodec/sanm.c in FFmpeg before 1.1.2 allow remote attackers to have an unspecified impact via crafted image dimensions in LucasArts Smush video data, which triggers an out-of-bounds array access...

CVE-2013-0878: Improper Restriction of Operations within the Bounds of a Memory Buffer

The advanceline function in libavcodec/targa.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via crafted Targa image data, related to an out-of-bounds array access...

CVE-2013-0873: Improper Input Validation

The readheader function in libavcodec/shorten.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid channel count, related to "freeing invalid addresses."...

CVE-2013-0875: Undefined Security Weakness

The ffaddpngpaethprediction function in libavcodec/pngdec.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via a crafted PNG image, related to an out-of-bounds array access...

CVE-2013-4265: Undefined Security Weakness

The avreallocparray function in libavutil/mem.c in FFmpeg before 2.0.1 has an unspecified impact and remote vectors related to a "wrong return code" and a resultant NULL pointer dereference...

CVE-2013-0869: Improper Restriction of Operations within the Bounds of a Memory Buffer

The fieldend function in libavcodec/h264.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted H.264 data, related to an SPS and slice mismatch and an out-of-bounds array access...

CVE-2013-0867: Improper Input Validation

The decodesliceheader function in libavcodec/h264.c in FFmpeg before 1.1.2 does not properly check when the pixel format changes, which allows remote attackers to have unspecified impact via crafted H.264 video data, related to an out-of-bounds array access...

CVE-2013-0868: Improper Restriction of Operations within the Bounds of a Memory Buffer

libavcodec/huffyuvdec.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted Huffyuv data, related to an out-of-bounds write and 1 unchecked return codes from the initvlc function and 2 "len==0 cases."...