CVE-2016-2328

libswscale/swscaleunscaled.c in FFmpeg before 2.8.6 does not validate certain height values, which allows remote attackers to cause a denial of service out-of-bounds array read access or possibly have unspecified other impact via a crafted .cine file, related to the bayertorgb24wrapper and...

CVE-2016-2330

libavcodec/gif.c in FFmpeg before 2.8.6 does not properly calculate a buffer size, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via a crafted .tga file, related to the gifimagewriteimage, gifencodeinit, and...

PT-2016-1272

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.8.5 Description The issue is caused by a buffer overflow in the apng encode frame and encode apng functions in the libavcodec/pngenc.c file of the FFmpeg multimedia library. This can be exploited by a remote attacker...

PT-2016-1253

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.8.6 Description The issue is related to a buffer size calculation error in the libavcodec/gif.c file, which can be exploited by remote attackers using a crafted .tga file. This exploitation is associated with the gif...

CVE-2016-2330: Improper Restriction of Operations within the Bounds of a Memory Buffer

libavcodec/gif.c in FFmpeg before 2.8.6 does not properly calculate a buffer size, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via a crafted .tga file, related to the gifimagewriteimage, gifencodeinit, and...

CVE-2016-2327: Improper Restriction of Operations within the Bounds of a Memory Buffer

libavcodec/pngenc.c in FFmpeg before 2.8.5 uses incorrect line sizes in certain row calculations, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via a crafted .avi file, related to the apngencodeframe and encodeapng...

PT-2016-1273

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.8.6 Description The issue is related to the libswscale/swscale unscaled.c file in FFmpeg, where certain height values are not validated, allowing remote attackers to cause a denial of service or possibly have other...

PT-2016-1476

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.8.5 Description The issue is caused by an integer overflow in the asf write packet function in libavformat/asfenc.c. This can be exploited by a remote attacker using a specially crafted PTS value in a .mov file,...

UBUNTU-CVE-2016-2326

Integer overflow in the asfwritepacket function in libavformat/asfenc.c in FFmpeg before 2.8.5 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PTS aka presentation timestamp value in a .mov file...

The vulnerability of the FFmpeg multimedia library, which allows a intruder to trigger a service failure or cause other effects

The vulnerability of the FFmpeg multimedia library exists due to the retention of width and height parameters after a failure. Exploiting this vulnerability can allow a malicious actor to cause service interruptions or potentially have other effects using a specially created .mov file...

The vulnerability of the FFmpeg multimedia library, which allows a intruder to trigger a service failure or cause other effects

The vulnerability of the ffdwtdecode function libavcodec/jpeg2000dwt.c in the multimedia library FFmpeg exists due to the lack of checks for the number of decomposition levels before performing the discrete wavelet transformation. Exploiting this vulnerability could allow a malicious actor to cau...

UBUNTU-CVE-2016-2330

libavcodec/gif.c in FFmpeg before 2.8.6 does not properly calculate a buffer size, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via a crafted .tga file, related to the gifimagewriteimage, gifencodeinit, and...

CVE-2016-2329: Improper Restriction of Operations within the Bounds of a Memory Buffer

libavcodec/tiff.c in FFmpeg before 2.8.6 does not properly validate RowsPerStrip values and YCbCr chrominance subsampling factors, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via a crafted TIFF file, related to th...

CVE-2016-2326: Integer Overflow or Wraparound

Integer overflow in the asfwritepacket function in libavformat/asfenc.c in FFmpeg before 2.8.5 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PTS aka presentation timestamp value in a .mov file...

CVE-2016-2328: Improper Restriction of Operations within the Bounds of a Memory Buffer

libswscale/swscaleunscaled.c in FFmpeg before 2.8.6 does not validate certain height values, which allows remote attackers to cause a denial of service out-of-bounds array read access or possibly have unspecified other impact via a crafted .cine file, related to the bayertorgb24wrapper and...

PT-2016-1274

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.8.6 Description The issue is related to the improper validation of RowsPerStrip values and YCbCr chrominance subsampling factors in the libavcodec/tiff.c file. This can be exploited by remote attackers using a crafte...

Imgur: SSRF / Local file enumeration / DoS due to improper handling of certain file formats by ffmpeg

Hello! Short description ======== https://imgur.com/vidgif/upload endpoint is vulnerable to a SSRF/LFE vulnerability which allows an attacker to craft connections originating from imgur servers to any destination on the internet and imgur internal network and disclose lists of files located on...

Imgur: SSRF and local file read in video to gif converter

Video to gif converter on http://imgur.com/vidgif uses Lavf/55.48.100 with network options enabled. It makes possible SSRF by uploading specially crafted playlist. For example we can use mp4 file http://yngwie.ru/1.mp4 EXTM3U EXT-X-MEDIA-SEQUENCE:0 EXTINF:10.0, http://yngwie.ru/2.mp4 EXT-X-ENDLIS...

Mageia: Security Advisory (MGASA-2016-0060)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2016-0060 Updated ffmpeg packages fix security vulnerabilities

Updated ffmpeg packages fix security vulnerabilities: FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live Streaming HLS M3U8 file, leading to an external HTTP request in which the URL string contains the first li...