PT-2013-1412

Name of the Vulnerable Software and Affected Versions FFmpeg versions 0.7.x through 0.7.11 FFmpeg versions 0.8.x through 0.8.10 FFmpeg versions prior to 0.10 Libav versions 0.5.x through 0.5.8 Libav versions 0.6.x through 0.6.5 Libav versions 0.7.x through 0.7.4 Libav versions 0.8.x through 0.8.0...

CVE-2011-3937

CVE-2011-3937 concerns the H.263 decoder (libavcodec/h263dec.c) in FFmpeg and Libav, where the width/height could change when frame threads are used. Affected products/versions include FFmpeg 0.7.x before 0.7.12, 0.8.x before 0.8.11, and older Libav lines (0.5.x before 0.5.9, 0.6.x before 0.6.6, ...

CVE-2011-3937

The H.263 codec libavcodec/h263dec.c in FFmpeg 0.7.x before 0.7.12, 0.8.x before 0.8.11, and unspecified versions before 0.10, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 has unspecified impact and attack vectors related to "width/height changin...

CVE-2011-3937: Undefined Security Weakness

The H.263 codec libavcodec/h263dec.c in FFmpeg 0.7.x before 0.7.12, 0.8.x before 0.8.11, and unspecified versions before 0.10, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 has unspecified impact and attack vectors related to "width/height changin...

Ubuntu Update for ffmpeg USN-1675-1

Ubuntu Update for Linux kernel vulnerabilities USN-1675-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN16751.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for ffmpeg USN-1675-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu: Security Advisory (USN-1675-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 10.04 LTS : ffmpeg vulnerabilities (USN-1675-1)

It was discovered that FFmpeg incorrectly handled certain malformed media files. If a user were tricked into opening a crafted media file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. No...

USN-1675-1: FFmpeg vulnerabilities

It was discovered that FFmpeg incorrectly handled certain malformed media files. If a user were tricked into opening a crafted media file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program...

Vulnerabilities in FFmpeg Libavcodec Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of three vulnerabilities in the FFmpeg codec library software version 0.10 and earlier versions. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected...

PT-2012-1197

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.11 Description The issue is related to insufficient input validation in the Libavcodec library of FFmpeg, allowing remote attackers to execute arbitrary code via a crafted QT file. This can be exploited by an attacke...

PT-2012-1198

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.11 Description The issue is related to insufficient input validation in the Libavcodec library of FFmpeg, which can be exploited by remote attackers to execute arbitrary code using a crafted ASF file. Recommendations...

CVE-2012-2882

FFmpeg, as used in Google Chrome before 22.0.1229.79, does not properly handle OGG containers, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, related to a "wild pointer" issue...

Null pointer dereference

FFmpeg, as used in Google Chrome before 22.0.1229.79, does not properly handle OGG containers, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, related to a "wild pointer" issue...

CVE-2012-2882

FFmpeg, as used in Google Chrome before 22.0.1229.79, does not properly handle OGG containers, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, related to a "wild pointer" issue...

CVE-2012-2882

CVE-2012-2882 concerns FFmpeg used by Google Chrome prior to 22.0.1229.79 failing to handle OGG containers, enabling remote denial of service (via a wild pointer) and possibly other unspecified impacts. Public references indicate Chromium/Chromium-based browser updates fixed multiple security fla...

CVE-2012-2882

FFmpeg, as used in Google Chrome before 22.0.1229.79, does not properly handle OGG containers, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, related to a "wild pointer" issue...

CVE-2012-2882

FFmpeg, as used in Google Chrome before 22.0.1229.79, does not properly handle OGG containers, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, related to a "wild pointer" issue...

CVE-2012-2882

FFmpeg, as used in Google Chrome before 22.0.1229.79, does not properly handle OGG containers, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, related to a "wild pointer" issue...

CVE-2012-2882: Improper Input Validation

FFmpeg, as used in Google Chrome before 22.0.1229.79, does not properly handle OGG containers, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, related to a "wild pointer" issue...

PT-2012-4331

Name of the Vulnerable Software and Affected Versions FFmpeg versions as used in Google Chrome before 22.0.1229.79 Description The issue is related to a "wild pointer" problem when handling OGG containers, which can be exploited by remote attackers to cause a denial of service or possibly have...