The vulnerability of the FFmpeg multimedia library allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the strreadpacket function in the FFmpeg multimedia library libavformat/psxstr.c is caused by buffer overflows on the stack. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code terminate the application using a specially...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks. A malicious user can pass a malicious SWF file to the system, resulting in an infinite loop that can lead to a denial of service...

openSUSE Security Update : ffmpeg (openSUSE-2016-1203)

This update for ffmpeg fixes multiple security issues in ffmpeg boo1003806 These vulnerabilities can be triggered when processing specially crafted avi video content, and could lead to crashes or have unspecified further impact including potential code execution. - CVE-2016-7562: out-of-bounds...

OPENSUSE-SU-2016:2556-1 Security update for ffmpeg

This update for ffmpeg fixes multiple security issues in ffmpeg boo1003806 These vulnerabilities can be triggered when processing specially crafted avi video content, and could lead to crashes or have unspecified further impact including potential code execution. - CVE-2016-7562: out-of-bounds...

OPENSUSE-SU-2016:2560-1 Security update for ffmpeg

This update for ffmpeg fixes multiple security issues in ffmpeg boo1003806 These vulnerabilities can be triggered when processing specially crafted avi video content, and could lead to crashes or have unspecified further impact including potential code execution. - CVE-2016-7562: out-of-bounds...

PT-2016-7394

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 3.1.4 Description The issue allows remote attackers to cause a denial of service via a crafted AVI file, specifically through the avi read seek function in libavformat/avidec.c. Recommendations For versions prior to...

PT-2016-7388

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 3.1.4 Description The issue allows remote attackers to cause a denial of service, specifically a buffer overflow, by providing a crafted AVI file. This is due to a problem in the ff draw pc font function. Recommendatio...

PT-2016-7421

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 3.1.4 Description The issue allows remote attackers to cause a denial of service by utilizing a crafted AVI file, which results in a NULL pointer being used. This is due to a problem in the read gab2 sub function locat...

PT-2016-7351

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 3.1.4 Description The issue is related to the cavs idct8 add c function in libavcodec/cavsdsp.c, which is vulnerable to reading out-of-bounds memory when decoding with cavs decode. Recommendations For versions prior to...

PT-2016-7385

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 3.1.4 Description The issue arises from a memory leak in the avi read header function when decoding an AVI file with a crafted "strh" structure. Recommendations For versions prior to 3.1.4, update to version 3.1.4 or...

openSUSE Security Update : ffmpeg (openSUSE-2016-1160)

ffmpeg was updated to 2.8.8 to fix the following issues, both bugs and security issues : - avformat/oggparsevp8: fix pts calculation on pages ending with an invisible frame - avcodec/mjpegdec: Do not try to detect last scan but apply idct after all scans for progressive jpeg -...

ffmpeg array out-of-bounds vulnerability

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams. Under the LGPL or GPL license. It provides a complete solution for recording, converting, and streaming audio and video. A security vulnerability exists in ffmpeg3.1.4 where an...

ffmpeg denial of service vulnerability (CNVD-2016-08733)

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams. Under the LGPL or GPL license. It provides a complete solution for recording, converting, and streaming audio and video. A denial of service vulnerability exists in avireadniko...

ffmpeg array out-of-bounds vulnerability (CNVD-2016-08732)

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams. Under the LGPL or GPL license. It provides a complete solution for recording, converting, and streaming audio and video. A security vulnerability exists in the use of incorrect...

ffmpeg denial of service vulnerability (CNVD-2016-08729)

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams. Under the LGPL or GPL license. It provides a complete solution for recording, converting, and streaming audio and video. A denial of service vulnerability exists in avireadseek...

ffmpeg Contingency Disposal Error Vulnerability

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams. Under the LGPL or GPL license. It provides a complete solution for recording, converting, and streaming audio and video. A security vulnerability in readgab2sub in ffmpeg3.1.4...

ffmpeg array out-of-bounds vulnerability (CNVD-2016-08731)

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams. Under the LGPL or GPL license. It provides a complete solution for recording, converting, and streaming audio and video. A security vulnerability exists in the use of incorrect...

FFmpeg Denial of Service Vulnerability (CNVD-2016-08274)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A denial of service vulnerability exists in FFmpeg version 3.1.2. An attacker can exploit this vulnerability to cause a denial of service...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks. A malicious user can pass a malicious AVI file containing a nctg structure to the system, causing an infinite loop in the system, leading to a denial of service...

SUSE SLES11 Security Update : MozillaFirefox (SUSE-SU-2016:2195-1)

Mozilla Firefox was updated to 45.3.0 ESR to fix the following issues bsc991809 : - MFSA 2016-62/CVE-2016-2835/CVE-2016-2836 Miscellaneous memory safety hazards rv:48.0 / rv:45.3 - MFSA 2016-63/CVE-2016-2830 Favicon network connection can persist when page is closed - MFSA 2016-64/CVE-2016-2838...