Updated avidemux packages fix security vulnerabilities

Updated avidemux packages fix security vulnerabilities: The mjpegdecodeapp function in libavcodec/mjpegdec.c in FFMpeg before 1.2.11 allows remote attackers to cause a denial of service out-of-bounds heap access and possibly have other unspecified impact via vectors related to LJIF tags in an MJP...

MGASA-2015-0233 Updated avidemux packages fix security vulnerabilities

Updated avidemux packages fix security vulnerabilities: The mjpegdecodeapp function in libavcodec/mjpegdec.c in FFMpeg before 1.2.11 allows remote attackers to cause a denial of service out-of-bounds heap access and possibly have other unspecified impact via vectors related to LJIF tags in an MJP...

avidemux26 -- multiple vulnerabilities in bundled FFmpeg

The Mageia project reports: Avidemux is built with a bundled set of FFmpeg libraries. The bundled FFmpeg version has been updated from 1.2.10 to 1.2.12 to fix these security issues and other bugs fixed upstream in FFmpeg...

FFmpeg 'msrle_decode_pal4' Denial of Service Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg versions prior to 2.5.6 and 2.6.2, which originates from an error in the 'msrledecodepal4' function in the libavcodec/msrledec.c file. An attacker...

FFmpeg ff_h264_free_tables function after the release of the heavy interest with vulnerability-vulnerability warning-the black bar safety net

Affected system: FFmpeg FFmpeg 2.3.6 Description: -------------------------------------------------------------------------------- CVECAN ID: CVE-2 0 1 5-3 4 1 7 FFmpeg is a free you can perform audio and video multiple formats of video, transcoding, streaming functionality of the software. FFmpe...

FFmpeg Memory Misreference Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A memory misreference vulnerability exists in the 'ffh264freetables' function in the libavcodec/h264.c file in FFmpeg versions prior to 2.3.6. A remote attacker can exploit this vulnerabili...

CVE-2015-3417

Use-after-free vulnerability in the ffh264freetables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted H.264 data in an MP4 file, as demonstrated by an HTML VIDEO element that references...

DEBIAN-CVE-2015-3417

Use-after-free vulnerability in the ffh264freetables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted H.264 data in an MP4 file, as demonstrated by an HTML VIDEO element that references...

Design/Logic Flaw

Use-after-free vulnerability in the ffh264freetables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted H.264 data in an MP4 file, as demonstrated by an HTML VIDEO element that references...

CVE-2015-3417

CVE-2015-3417 describes a use-after-free in FFmpeg's libavcodec/h264.c (ff_h264_free_tables) that can be triggered by crafted H.264 data in an MP4, potentially causing a denial of service. The vulnerability affects FFmpeg/libav prior to a fixed version referenced in multiple advisories. Publicly ...

CVE-2015-3417

Use-after-free vulnerability in the ffh264freetables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted H.264 data in an MP4 file, as demonstrated by an HTML VIDEO element that references...

CVE-2015-3417

Use-after-free vulnerability in the ffh264freetables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted H.264 data in an MP4 file, as demonstrated by an HTML VIDEO element that references...

ffmpeg -- out-of-bounds array access

NVD reports: The msrledecodepal4 function in msrledec.c in Libav before 10.7 and 11.x before 11.4 and FFmpeg before 2.0.7, 2.2.x before 2.2.15, 2.4.x before 2.4.8, 2.5.x before 2.5.6, and 2.6.x before 2.6.2 allows remote attackers to have unspecified impact via a crafted image, related to a pixel...

Mandriva Linux Security Advisory : ffmpeg (MDVSA-2015:173)

Updated ffmpeg packages fix security vulnerabilities : The takdecodeframe function in libavcodec/takdec.c in FFmpeg before 2.0.4 does not properly validate a certain bits-per-sample value, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have...

Multiple Integer Overflow Vulnerabilities in FFmpeg

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. Multiple integer overflow vulnerabilities exist in FFmpeg versions prior to 0.10.1. An attacker can exploit the vulnerabilities to execute arbitrary code in the context of the affected...

Debian DLA-83-1 : ffmpeg update

This update to ffmpeg disables support for over 100 codecs, decoders, and formats that are rarely used nowadays, for which the support available in squeeze is most likely insufficient, etc. This update is only meant to reduce the attack surface. ffmpeg is otherwise unsupported in squeeze-lts, and...

libav / ffmpeg multiple security vulnerabilities

Multiple memory corruptions on different media formats parsing...

ffmpeg -- multiple vulnerabilities

Please reference CVE/URL list for details...

openSUSE Security Update : chromium (openSUSE-2015-204)

chromium was updated to version 40.0.2214.111 to fix 31 vulnerabilities. These security issues were fixed : - CVE-2015-1209: Use-after-free in DOM bnc916841. - CVE-2015-1210: Cross-origin-bypass in V8 bindings bnc916843. - CVE-2015-1211: Privilege escalation using service workers bnc916838. -...

Security update for chromium (important)

chromium was updated to version 40.0.2214.111 to fix 31 vulnerabilities. These security issues were fixed: - CVE-2015-1209: Use-after-free in DOM bnc916841. - CVE-2015-1210: Cross-origin-bypass in V8 bindings bnc916843. - CVE-2015-1211: Privilege escalation using service workers bnc916838. -...