Denial Of Service (DoS)

FFMpeg is vulnerable to a denial of service DoS attack. A malicious user can pass a malicious AVI file to the system, causing a null pointer error that can crash the application...

Denial Of Service (DoS)

FFMpeg is vulnerable to denial of service DoS attacks. A malicious user can pass the system a malicious AVI file which can lead to an assert fault that can crash the system...

Denial Of Service (DoS)

FFMpeg is vulnerable to a denial of service DoS attacks. A malicious user can pass a malicious .mov file to the system, causing a denial of service via the consumption of memory...

ffmpeg: Stack-buffer-overflow in synth_tones

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5737865715646464 Project: ffmpeg Fuzzer: ffmpegAUDIOAVCODECIDDTSfuzzer Job Type: libfuzzerasanffmpeg Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x7f440e0a0a20 Crash State...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.

The vulnerability of the Ffmpeg component in the Google Chrome browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions through a specially created video file...

Debian DSA-3776-1 : chromium-browser - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2017-5006 Mariusz Mlynski discovered a cross-site scripting issue. - CVE-2017-5007 Mariusz Mlynski discovered another cross-site scripting issue. - CVE-2017-5008 Mariusz Mlynski discovered a third cross-site scripting...

GLSA-201701-71 : FFmpeg: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201701-71 FFmpeg: Multiple vulnerabilities Multiple vulnerabilities have been discovered in FFmpeg. Please review the CVE identifiers referenced below for details. Impact : Remote attackers could cause a Denial of Service conditio...

FFmpeg: Multiple vulnerabilities

Background FFmpeg is a complete, cross-platform solution to record, convert and stream audio and video. Description Multiple vulnerabilities have been discovered in FFmpeg. Please review the CVE identifiers referenced below for details. Impact Remote attackers could cause a Denial of Service...

CVE-2017-5024

FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file...

UBUNTU-CVE-2017-5025

FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file...

CVE-2017-5025

FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file...

UBUNTU-CVE-2017-5024

FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file...

chromium-browser: heap overflow in ffmpeg

FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file...

ffmpeg: Crash in ff_put_pixels16_sse2

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6020152642502656 Project: ffmpeg Fuzzer: libFuzzerffmpegVIDEOAVCODECIDH264fuzzer Fuzz target binary: ffmpegVIDEOAVCODECIDH264fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux...

CVE-2017-5025

FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file...

CVE-2017-5024

FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file...

ffmpeg -- heap overflow in lavf/mov.c

FFmpeg security reports: FFmpeg 3.2.4 fixes the following vulnerabilities: CVE-2017-5024, CVE-2017-5025...

firefox security update

45.7.0-1.0.1 - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files 45.7.0-1 - Updated to 45.7.0 B1 45.6.0-2 - Enabled ffmpeg 54.35.1 rhbz1330898, mozbz1263665...

ffmpeg: Heap-buffer-overflow in ipvideo_decode_block_opcode_0xA

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4850119698546688 Project: ffmpeg Fuzzer: libFuzzerffmpegVIDEOAVCODECIDINTERPLAYVIDEOfuzzer Fuzz target binary: ffmpegVIDEOAVCODECIDINTERPLAYVIDEOfuzzer Job Type: libfuzzerasanffmpeg...

CVE-2016-6920

Heap-based buffer overflow in the decodeblock function in libavcodec/exr.c in FFmpeg before 3.1.3 allows remote attackers to cause a denial of service application crash via vectors involving tile positions...