CVE-2016-7502

The cavsidct8addc function in libavcodec/cavsdsp.c in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when decoding with cavsdecode...

CVE-2016-7785

The avireadseek function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service assert fault via a crafted AVI file...

CVE-2016-7785

The avireadseek function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service assert fault via a crafted AVI file...

CVE-2016-7555

The avireadheader function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to memory leak when decoding an AVI file that has a crafted "strh" structure...

CVE-2016-6671

Illustrative vulnerability summary : CVE-2016-6671 affects FFmpeg’s libavcodec/rawdec.c, where the raw_decode function in FFmpeg before 3.1.2 can be exploited by a crafted SWF file to cause memory corruption, leading to denial of service or arbitrary code execution. Affected component: libavcodec...

CVE-2016-7502

CVE-2016-7502 affects FFmpeg prior to 3.1.4. The vulnerability lies in the function cavs_idct8_add_c (libavcodec/cavsdsp.c), which can read out-of-bounds memory when decoding with cavs_decode. This could impact systems processing certain cavs-video streams, with potential effects on confidentiali...

CVE-2016-7555

The CVE concerns FFmpeg before 3.1.4, specifically the avi_read_header function in libavformat/avidec.c, which leaks memory when decoding an AVI file with a crafted "strh" structure. Affected component: FFmpeg's demux/AVI parser. Root cause: memory leak in avi_read_header when parsing a manipulat...

CVE-2016-7562

The ffdrawpcfont function in libavcodec/cgadata.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service buffer overflow via a crafted AVI file...

CVE-2016-7555

The avireadheader function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to memory leak when decoding an AVI file that has a crafted "strh" structure...

CVE-2016-7905

The readgab2sub function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service NULL pointer used via a crafted AVI file...

CVE-2016-7450

The fflog216bitc function in libavutil/intmath.h in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when it decodes a malformed AIFF file...

Denial Of Service (DoS) And Remote Code Execution (RCE)

FFmpeg is vulnerable to denial of service DoS and remote code execution RCE attacks. A malicious user can pass a malicious SWF file to the server that can cause a denial of service via memory corruption or execute arbitrary code...

FFmpeg Denial of Service Vulnerability (CNVD-2016-12568)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A denial of service vulnerability exists in FFmpeg 3.2 and earlier versions. An attacker can exploit this vulnerability to cause an application crash denial of service...

FFmpeg Denial of Service Vulnerability (CNVD-2016-12569)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A denial of service vulnerability exists in FFmpeg version 3.1.4. An attacker can exploit this vulnerability to cause an application crash denial of service...

Debian Security Advisory DSA 3731-1 (chromium-browser - security update)

Several vulnerabilities have been discovered in the chromium web browser. CVE-2016-5181 A cross-site scripting issue was discovered. CVE-2016-5182 Giwan Go discovered a heap overflow issue. CVE-2016-5183 A use-after-free issue was discovered in the pdfium library. CVE-2016-5184 Another...

Ubuntu: Security Advisory (USN-3133-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS / 16.04 LTS : Oxide vulnerabilities (USN-3133-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3133-1 advisory. Multiple security vulnerabilities were discovered in Chromium. If a user were tricked in to opening a specially crafted website, an attacker...

USN-3133-1 oxide-qt vulnerabilities

Multiple security vulnerabilities were discovered in Chromium. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to obtain sensitive information, cause a denial of service via application crash, or execute arbitrary code. CVE-2016-5198,...

USN-3133-1: Oxide vulnerabilities

Multiple security vulnerabilities were discovered in Chromium. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to obtain sensitive information, cause a denial of service via application crash, or execute arbitrary code. CVE-2016-5198,...

FFmpeg mov_read_keys Integer Overflow (CVE-2016-5199)

An integer overflow vulnerability exists in FFmpeg. The vulnerability is due to an integer overflow while processing a media file containing a metadata keys atom with a malicious entrycount value. Successful exploitation of the vulnerability can possibly lead to remote code execution...