CVE-2014-5271: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the encodeslice function in libavcodec/proresenckostya.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.x before 2.2.7, and 2.3.x before 2.3.3 and Libav before 10.5 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via...

PT-2014-6384

Name of the Vulnerable Software and Affected Versions FFMpeg versions prior to 1.1.14 FFMpeg versions 1.2.x prior to 1.2.8 FFMpeg versions 2.2.x prior to 2.2.7 FFMpeg versions 2.3.x prior to 2.3.2 Description The issue allows remote attackers to have an unspecified impact via a crafted iff image...

CVE-2014-5272: Improper Restriction of Operations within the Bounds of a Memory Buffer

libavcodec/iff.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.2.x before 2.2.7, and 2.3.x before 2.3.2 allows remote attackers to have unspecified impact via a crafted iff image, which triggers an out-of-bounds array access, related to the rgb8 and rgbn formats...

libav / ffmpeg memory corruption

Memory corruption on FFV1 decoding...

Updated avidemux packages fix security issues in the bundles ffmpeg

Updated avidemux packages fix security vulnerabilities: Avidemux built with a bundled set of FFmpeg libraries. The bundled FFmpeg versions have been updated to 0.9.4 in Mageia 3 and 1.2.7 in Mageia 4 to fix several security issues and other bugs fixed upstream in FFmpeg. For the Mageia 3 update,...

MGASA-2014-0297 Updated avidemux packages fix security issues in the bundles ffmpeg

Updated avidemux packages fix security vulnerabilities: Avidemux built with a bundled set of FFmpeg libraries. The bundled FFmpeg versions have been updated to 0.9.4 in Mageia 3 and 1.2.7 in Mageia 4 to fix several security issues and other bugs fixed upstream in FFmpeg. For the Mageia 3 update,...

PT-2014-9134

Name of the Vulnerable Software and Affected Versions Avidemux versions prior to the update with FFmpeg 0.9.4 in Mageia 3 and 1.2.7 in Mageia 4 Description The issue concerns security vulnerabilities in Avidemux, which is built with a bundled set of FFmpeg libraries. The vulnerabilities have been...

ffmpeg / libav multiple security vulnerabilities

Integer overflows, memory corruptions, buffer overflows, etc...

[ MDVSA-2014:129 ] ffmpeg

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:129 http://www.mandriva.com/en/support/security/ Package : ffmpeg Date : July 9, 2014 Affected: Business Server 1.0 Problem Description: Multiple vulnerabilities has been discovered and corrected in ffmpeg:...

Mandriva Linux Security Advisory : ffmpeg (MDVSA-2014:129)

Multiple vulnerabilities has been discovered and corrected in ffmpeg : Multiple unspecified vulnerabilities in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 have unknown impact and attack vectors related to 1 size of mclms arrays, 2 a getbits0 in decodeacfilter, and 3 too many bits in...

Updated ffmpeg packages fix security vulnerabilities

A use-after-free vulnerability in FFmpeg before 1.1.9 involving seek operations on video data could allow remote attackers to cause a denial of service CVE-2012-5150. The takdecodeframe function in libavcodec/takdec.c in FFmpeg before 1.1.9 does not properly validate a certain bits-per-sample...

MGASA-2014-0281 Updated ffmpeg packages fix security vulnerabilities

A use-after-free vulnerability in FFmpeg before 1.1.9 involving seek operations on video data could allow remote attackers to cause a denial of service CVE-2012-5150. The takdecodeframe function in libavcodec/takdec.c in FFmpeg before 1.1.9 does not properly validate a certain bits-per-sample...

Updated ffmpeg packages fix security vulnerabilities

The takdecodeframe function in libavcodec/takdec.c in FFmpeg before 2.0.4 does not properly validate a certain bits-per-sample value, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted TAK aka Tom's lossless...

MGASA-2014-0280 Updated ffmpeg packages fix security vulnerabilities

The takdecodeframe function in libavcodec/takdec.c in FFmpeg before 2.0.4 does not properly validate a certain bits-per-sample value, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted TAK aka Tom's lossless...

PT-2020-7679

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.10.14 FFmpeg versions 1.1.x prior to 1.1.12 FFmpeg versions 1.2.x prior to 1.2.7 FFmpeg versions 2.0.x prior to 2.0.5 FFmpeg versions 2.1.x prior to 2.1.5 FFmpeg versions 2.2.x prior to 2.2.4 Description The issue is...

FFmpeg libavformat 'psxstr.c' STR Data Heap Based Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30154/info The 'libavformat' library from FFmpeg is prone to a remote heap-based buffer-overflow vulnerability because of insufficient boundary checks when parsing STR data. Remote attackers can exploit this issue by...

FFmpeg Version 0.5 - Multiple Remote Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/36465/info FFmpeg is prone to multiple remote vulnerabilities. Attackers may leverage these issues to execute arbitrary code in the context of the application or crash the application. FFmpeg 0.5 is affected; other versio...

FreeBSD : mplayer -- potential buffer overrun when processing malicious lzo compressed input (9ab3a22c-feb8-11e3-b938-5404a68ad561)

Michael Niedermayer and Luca Barbato report in upstream ffmpeg : avutil/lzo: Fix integer overflow %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2020 Jacques Vidrine and...

mencoder -- potential buffer overrun when processing malicious lzo compressed input

Michael Niedermayer and Luca Barbato report in upstream ffmpeg: avutil/lzo: Fix integer overflow...

[SECURITY] [DSA 2959-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2959-1 [email protected] http://www.debian.org/security/ Michael Gilbert June 14, 2014 http://www.debian.org/security/faq -...