PT-2014-8606

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.4.2 Description The issue is related to the improper validation of bits-per-pixel fields in crafted TIFF data, which can be exploited by remote attackers to cause a denial of service due to out-of-bounds access, or...

PT-2014-8609

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.4.2 Description The issue is related to the computation of image heights in crafted GIF data, which can lead to out-of-bounds access. This may cause a denial of service or have other unspecified impacts...

CVE-2014-8542: Improper Restriction of Operations within the Bounds of a Memory Buffer

libavcodec/utils.c in FFmpeg before 2.4.2 omits a certain codec ID during enforcement of alignment, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via crafted JV data...

CVE-2014-8544: Improper Input Validation

libavcodec/tiff.c in FFmpeg before 2.4.2 does not properly validate bits-per-pixel fields, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via crafted TIFF data...

CVE-2014-8547

libavcodec/gifdec.c in FFmpeg before 2.4.2 does not properly compute image heights, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via crafted GIF data...

PT-2014-8610

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.4.2 Description The issue is caused by an off-by-one error in the libavcodec/smc.c file, which can be exploited by remote attackers using crafted Quicktime Graphics aka SMC video data. This can lead to a denial of...

PT-2014-8611

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.4.2 Description The issue is related to the handling of On2 data in the libavcodec/on2avc.c file. It does not properly constrain the number of channels, which can lead to out-of-bounds access. This can cause a denial...

PT-2014-8604

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.4.2 Description The issue is related to the libavcodec/utils.c file in FFmpeg, where a certain codec ID is not properly enforced during alignment, allowing remote attackers to cause a denial of service out-of-bounds...

PT-2014-8603

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.4.2 Description The issue allows remote attackers to cause a denial of service or possibly have other impacts via crafted MJPEG data. This is due to the consideration of only dimension differences, and not...

CVE-2014-8542

libavcodec/utils.c in FFmpeg before 2.4.2 omits a certain codec ID during enforcement of alignment, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via crafted JV data...

UBUNTU-CVE-2014-8541

libavcodec/mjpegdec.c in FFmpeg before 2.4.2 considers only dimension differences, and not bits-per-pixel differences, when determining whether an image size has changed, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via...

UBUNTU-CVE-2014-8544

libavcodec/tiff.c in FFmpeg before 2.4.2 does not properly validate bits-per-pixel fields, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via crafted TIFF data...

CVE-2014-8541: Improper Restriction of Operations within the Bounds of a Memory Buffer

libavcodec/mjpegdec.c in FFmpeg before 2.4.2 considers only dimension differences, and not bits-per-pixel differences, when determining whether an image size has changed, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via...

PT-2014-8607

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.4.2 Description The issue allows remote attackers to cause a denial of service or possibly have other impacts via crafted PNG data. This is due to the monochrome-black format being accepted without verifying that the...

CVE-2014-8541

libavcodec/mjpegdec.c in FFmpeg before 2.4.2 considers only dimension differences, and not bits-per-pixel differences, when determining whether an image size has changed, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via...

CVE-2014-8548: Improper Restriction of Operations within the Bounds of a Memory Buffer

Off-by-one error in libavcodec/smc.c in FFmpeg before 2.4.2 allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via crafted Quicktime Graphics aka SMC video data...

CVE-2014-8545: Undefined Security Weakness

libavcodec/pngdec.c in FFmpeg before 2.4.2 accepts the monochrome-black format without verifying that the bits-per-pixel value is 1, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via crafted PNG data...

PT-2014-8608

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.4.2 Description The issue is related to an integer underflow in the libavcodec/cinepak.c module, which can be triggered by crafted Cinepak video data. This can lead to a denial of service due to out-of-bounds access ...

CVE-2014-8543

libavcodec/mmvideo.c in FFmpeg before 2.4.2 does not consider all lines of HHV Intra blocks during validation of image height, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via crafted MM video data...

CVE-2014-8543: Improper Input Validation

libavcodec/mmvideo.c in FFmpeg before 2.4.2 does not consider all lines of HHV Intra blocks during validation of image height, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via crafted MM video data...