Lucene search
+L

8169 matches found

OSV
OSV
added 2016/08/05 1:59 a.m.6 views

CVE-2016-2839

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo cairosurfacegetextents calls that do not properly interact with libav header allocation in FFmpeg 0.10, which allows remote attackers to cause a denial of service application crash via a crafted video...

6.5CVSS7.4AI score0.0179EPSS
SaveExploits0References8
Prion
Prion
added 2016/08/05 1:59 a.m.16 views

Code injection

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo cairosurfacegetextents calls that do not properly interact with libav header allocation in FFmpeg 0.10, which allows remote attackers to cause a denial of service application crash via a crafted video...

4.3CVSS6.8AI score0.0179EPSS
SaveExploits0References8Affected Software2
CVE
CVE
added 2016/08/05 1:00 a.m.127 views

CVE-2016-2839

CVE-2016-2839 affects Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux. The vulnerability stems from calls to cairo_surface_get_extents that do not properly interact with libav header allocation in FFmpeg 0.10, enabling a remote attacker to crash the application (denial of se...

6.5CVSS7.1AI score0.0179EPSS
SaveExploits0References8Affected Software1
Debian CVE
Debian CVE
added 2016/08/05 1:00 a.m.25 views

CVE-2016-2839

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo cairosurfacegetextents calls that do not properly interact with libav header allocation in FFmpeg 0.10, which allows remote attackers to cause a denial of service application crash via a crafted video...

6.5CVSS8.5AI score0.0179EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2016/08/03 5:18 a.m.21 views

CVE-2016-2839

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo cairosurfacegetextents calls that do not properly interact with libav header allocation in FFmpeg 0.10, which allows remote attackers to cause a denial of service application crash via a crafted video...

6.5CVSS7.4AI score0.0179EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2016/08/03 12:00 a.m.25 views

CVE-2016-2839

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo cairosurfacegetextents calls that do not properly interact with libav header allocation in FFmpeg 0.10, which allows remote attackers to cause a denial of service application crash via a crafted video...

6.5CVSS6.9AI score0.0179EPSS
SaveExploits0References3
Mozilla
Mozilla
added 2016/08/02 12:00 a.m.51 views

Cairo rendering crash due to memory allocation issue with FFmpeg 0.10 — Mozilla

Security researcher Bert Massop reported a crash in the Cairo graphics layer on Linux systems using the LibAV library included in version 0.10 of the FFmpeg library. This was due to an error when allocating the LibAV header when decoding some videos...

6.5CVSS7.6AI score0.0179EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2016/07/07 12:00 a.m.18 views

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The ffmpeg-doc package for the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

10CVSS7.7AI score0.17038EPSS
SaveExploits11References19Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/07 12:00 a.m.14 views

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The ffmpeg-dbg package in the Debian GNU/Linux operating system has multiple vulnerabilities. Exploiting these vulnerabilities may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

10CVSS7.7AI score0.17038EPSS
SaveExploits11References21Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:00 a.m.11 views

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the ffmpeg-debian package for the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

9.3CVSS5.4AI score0.04179EPSS
SaveExploits2References8Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:00 a.m.19 views

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the ffmpeg package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

7.5CVSS7.7AI score0.05019EPSS
SaveExploits0References9Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:00 a.m.16 views

The vulnerability of Google Chrome browser allows a malicious actor to trigger a service failure.

Google Chrome browser contains a vulnerability related to buffer overflow in the dynamic memory of the FFmpegVideoDecoder::GetVideoBuffer function in media/filters/ffmpegvideodecoder.cc. Exploiting this vulnerability allows malicious actors to cause system failures or other adverse effects throug...

7.5CVSS8.1AI score0.0176EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2016/06/20 12:00 a.m.53 views

GLSA-201606-09 : FFmpeg: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201606-09 FFmpeg: Multiple vulnerabilities Multiple vulnerabilities have been discovered in FFmpeg. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary code o...

8.8CVSS7.5AI score0.14621EPSS
SaveExploits4References10
CNVD
CNVD
added 2016/06/19 12:00 a.m.9 views

Libav 'mov_read_dref' Function Denial of Service Vulnerability

Libav is a cross-platform solution for recording and converting audio and video from the Libav team, and FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A denial of service vulnerability exists in the 'movreaddref' function in the...

8.8CVSS7.4AI score0.04054EPSS
SaveExploits0References1
Gentoo Linux
Gentoo Linux
added 2016/06/18 12:00 a.m.77 views

FFmpeg: Multiple vulnerabilities

Background FFmpeg is a complete, cross-platform solution to record, convert and stream audio and video. Description Multiple vulnerabilities have been discovered in FFmpeg. Please review the CVE identifiers referenced below for details. Impact A remote attacker could possibly execute arbitrary co...

8.8CVSS8.5AI score0.14621EPSS
SaveExploits4
NVD
NVD
added 2016/06/16 6:59 p.m.26 views

CVE-2016-3062

The movreaddref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via the entries value in a dref box in an MP4 file...

8.8CVSS8.8AI score0.04054EPSS
SaveExploits0References8
OSV
OSV
added 2016/06/16 6:59 p.m.8 views

CVE-2016-3062

The movreaddref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via the entries value in a dref box in an MP4 file...

8.8CVSS8.8AI score
SaveExploits0References8
Prion
Prion
added 2016/06/16 6:59 p.m.25 views

Memory corruption

The movreaddref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via the entries value in a dref box in an MP4 file...

6.8CVSS8.1AI score0.04054EPSS
SaveExploits0References8Affected Software4
UbuntuCve
UbuntuCve
added 2016/06/16 6:59 p.m.22 views

CVE-2016-3062

The movreaddref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via the entries value in a dref box in an MP4 file...

8.8CVSS7.5AI score0.04054EPSS
SaveExploits0References1
CVE
CVE
added 2016/06/16 6:00 p.m.98 views

CVE-2016-3062

CVE-2016-3062 affects Libav (libavformat/mov.c: mov_read_dref) and FFmpeg; vulnerable are Libav < 11.7 and FFmpeg

8.8CVSS8.7AI score0.04054EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder