CVE-2013-0874

FFmpeg contains a vulnerability (CVE-2013-0874) in libavcodec/tiff.c: the doubles2str and shorts2str helpers can be triggered by a crafted TIFF image, due to an out-of-bounds array access. Affected: FFmpeg versions before 1.1.3. Impact as described: remote attacker could cause unspecified effects...

CVE-2013-0875

FFmpeg is affected by CVE-2013-0875 via the ff_add_png_paeth_prediction function in libavcodec/pngdec.c, vulnerable before version 1.1.3 due to an out-of-bounds array access when processing crafted PNG images. This affects FFmpeg’s PNG decoding path and could enable remote impact. Remediation per...

CVE-2013-0872

The swrinit function in libswresample/swresample.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid or unsupported 1 input or 2 output channel layout, related to an out-of-bounds array access...

CVE-2013-0873

The readheader function in libavcodec/shorten.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid channel count, related to "freeing invalid addresses."...

CVE-2013-0874

The 1 doubles2str and 2 shorts2str functions in libavcodec/tiff.c in FFmpeg before 1.1.3 allow remote attackers to have an unspecified impact via a crafted TIFF image, related to an out-of-bounds array access...

CVE-2013-4264

The kempfdecodetile function in libavcodec/g2meet.c in FFmpeg before 2.0.1 allows remote attackers to cause a denial of service out-of-bounds heap write via a G2M4 encoded file...

CVE-2013-0875

The ffaddpngpaethprediction function in libavcodec/pngdec.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via a crafted PNG image, related to an out-of-bounds array access...

CVE-2013-0876

CVE-2013-0876 : FFmpeg is affected by multiple integer overflows in libavcodec/sanm.c (functions old_codec37 and old_codec47) that can be exploited by crafted LucasArts Smush data to trigger an out-of-bounds access. The issue affects FFmpeg releases before 1.1.3 and enables remote impact as descr...

CVE-2013-0873

The readheader function in libavcodec/shorten.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid channel count, related to "freeing invalid addresses."...

CVE-2013-0874

The 1 doubles2str and 2 shorts2str functions in libavcodec/tiff.c in FFmpeg before 1.1.3 allow remote attackers to have an unspecified impact via a crafted TIFF image, related to an out-of-bounds array access...

CVE-2013-4264

The kempfdecodetile function in libavcodec/g2meet.c in FFmpeg before 2.0.1 allows remote attackers to cause a denial of service out-of-bounds heap write via a G2M4 encoded file...

CVE-2013-0877

The CVE-2013-0877 entry describes a vulnerability in FFmpeg prior to 1.1.3 where the old_codec37 function in libavcodec/sanm.c can be triggered by crafted LucasArts Smush data of large size, leading to an out-of-bounds array access and unspecified impact. Public-availability documents (Gentoo GLS...

CVE-2013-0873

FFmpeg has a vulnerability CVE-2013-0873 in the read_header path (libavcodec/shorten.c) where an invalid channel count can cause freeing of invalid addresses. Affected are FFmpeg versions before 1.1.3. Impact is described as unspecified but high risk; limited details on exploit are provided. Reme...

CVE-2013-0878

CVE-2013-0878 affects FFmpeg’s libavcodec/targa.c, where the advance_line function is vulnerable to crafted Targa image data leading to an out-of-bounds array access. Impact is described as unspecified in the sources, with a high risk context (NVD CVSSv2 base score 9.3, network attack vector, no ...

CVE-2013-0875

The ffaddpngpaethprediction function in libavcodec/pngdec.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via a crafted PNG image, related to an out-of-bounds array access...

CVE-2013-0876

Multiple integer overflows in the 1 oldcodec37 and 2 oldcodec47 functions in libavcodec/sanm.c in FFmpeg before 1.1.3 allow remote attackers to have an unspecified impact via crafted LucasArts Smush data, which triggers an out-of-bounds array access...

CVE-2013-0878

The advanceline function in libavcodec/targa.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via crafted Targa image data, related to an out-of-bounds array access...

CVE-2013-0872

CVE-2013-0872 affects FFmpeg before 1.1.3 via the swr_init function in libswresample/swresample.c, allowing remote attackers to impact confidentiality, integrity, and availability by supplying an invalid/unsupported channel layout (out-of-bounds access). The vulnerability is documented across mul...

CVE-2013-0872

The swrinit function in libswresample/swresample.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid or unsupported 1 input or 2 output channel layout, related to an out-of-bounds array access...

CVE-2013-0878

The advanceline function in libavcodec/targa.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via crafted Targa image data, related to an out-of-bounds array access...