SOL03202240 - FFmpeg vulnerabilities CVE-2016-1897 and CVE-2016-1898

CVE-2016-1897 FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live Streaming HLS M3U8 file, leading to an external HTTP request in which the URL string contains the first line of a local file. CVE-2016-1898: FFmpe...

FreeBSD : ffmpeg -- remote denial of service in JPEG2000 decoder (6ac79ed8-ccc2-11e5-932b-5404a68ad561)

FFmpeg security reports : FFmpeg 2.8.6 fixes the following vulnerabilities : CVE-2016-2213 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and...

FFmpeg 'jpeg2000_decode_tile' Function Denial of Service Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability in the 'jpeg2000decodetile' function in FFmpeg's libavcodec/jpeg2000dec.c file allows remote attackers to exploit specially crafted JPEG 2000 data to crash an...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause some other unspecified effect.

The vulnerability of the VideoFramePool::PoolImpl::CreateFrame function in the media/base/videoframepool.cc module of the Google Chrome browser is related to memory initialization errors for the video-frame data structure. Exploiting this vulnerability may allow a remote attacker to cause service...

Out-of-bounds

The jpeg2000decodetile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 allows remote attackers to cause a denial of service out-of-bounds array read access via crafted JPEG 2000 data...

CVE-2016-2213

The jpeg2000decodetile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 allows remote attackers to cause a denial of service out-of-bounds array read access via crafted JPEG 2000 data...

CVE-2016-2213

The jpeg2000decodetile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 allows remote attackers to cause a denial of service out-of-bounds array read access via crafted JPEG 2000 data...

ALPINE-CVE-2016-2213

The jpeg2000decodetile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 allows remote attackers to cause a denial of service out-of-bounds array read access via crafted JPEG 2000 data...

DEBIAN-CVE-2016-2213

The jpeg2000decodetile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 allows remote attackers to cause a denial of service out-of-bounds array read access via crafted JPEG 2000 data...

CVE-2016-2213

The jpeg2000decodetile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 allows remote attackers to cause a denial of service out-of-bounds array read access via crafted JPEG 2000 data...

CVE-2016-2213

The jpeg2000decodetile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 allows remote attackers to cause a denial of service out-of-bounds array read access via crafted JPEG 2000 data...

CVE-2016-2213

The jpeg2000decodetile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 allows remote attackers to cause a denial of service out-of-bounds array read access via crafted JPEG 2000 data...

PT-2016-1254

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.8.6 Description The issue is caused by a buffer overflow in the jpeg2000 decode tile function of the FFmpeg library. This can be exploited by a remote attacker using specially crafted JPEG 2000 data, potentially...

CVE-2016-2213: Improper Restriction of Operations within the Bounds of a Memory Buffer

The jpeg2000decodetile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 allows remote attackers to cause a denial of service out-of-bounds array read access via crafted JPEG 2000 data...

openSUSE: Security Advisory for ffmpeg (openSUSE-SU-2016:0243-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for ffmpeg (openSUSE-SU-2016:0089-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ffmpeg -- remote denial of service in JPEG2000 decoder

FFmpeg security reports: FFmpeg 2.8.6 fixes the following vulnerabilities: CVE-2016-2213...

openSUSE Security Update : ffmpeg (openSUSE-2016-94)

This update to ffmpeg 2.8.5 fixes the following issues : - CVE-2016-1897: Cross-origin issue in URL processing concat - local file disclosure boo961937 - CVE-2016-1898: Cross-origin issue in URL processing subfile - local file disclosure boo961937 %NASLMINLEVEL 70300 C Tenable Network Security,...

Security update for ffmpeg (important)

This update to ffmpeg 2.8.5 fixes the following issues: CVE-2016-1897: Cross-origin issue in URL processing concat - local file disclosure boo961937 CVE-2016-1898: Cross-origin issue in URL processing subfile - local file disclosure boo961937...

openSUSE Security Update : ffmpeg (openSUSE-2016-26)

This update to ffmpeg 2.8.4 fixes the following issues : - CVE-2015-8661: Denial of service via crafted .mov file boo960385 - CVE-2015-8662: Denial of service via crafted JPEG 2000 data boo960384 - CVE-2015-8663: Denial of service via crafted H.264 data boo960383 %NASLMINLEVEL 70300 C Tenable...