CVE-2013-7014

CVE-2013-7014: FFmpeg (libavcodec/pngdsp.c, function add_bytes_l2_c) contains a signedness error that can allow remote attackers to trigger an out-of-bounds access via crafted PNG data, leading to denial of service or other unspecified impact. Affected affected version: FFmpeg before 2.1. The iss...

CVE-2011-4351

Buffer overflow in FFmpeg before 0.5.6, 0.6.x before 0.6.4, 0.7.x before 0.7.8, and 0.8.x before 0.8.8 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2011-4351

Buffer overflow in FFmpeg before 0.5.6, 0.6.x before 0.6.4, 0.7.x before 0.7.8, and 0.8.x before 0.8.8 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2013-7013

The g2minitbuffers function in libavcodec/g2meet.c in FFmpeg before 2.1 uses an incorrect ordering of arithmetic operations, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted Go2Webinar data...

CVE-2013-7018

libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not ensure the use of valid code-block dimension values, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JPEG2000 data...

CVE-2013-7022

The g2minitbuffers function in libavcodec/g2meet.c in FFmpeg before 2.1 does not properly allocate memory for tiles, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted Go2Webinar data...

PT-2013-6242

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the g2m init buffers function in libavcodec/g2meet.c, which does not properly allocate memory for tiles. This can be exploited by remote attackers using crafted Go2Webinar data,...

PT-2013-1410

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.10 Description A double free vulnerability exists in the vp3 update thread context function in libavcodec/vp3.c, which can be exploited by remote attackers using crafted vp3 data. The impact of this issue is...

PT-2013-6244

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the jpeg2000 decode tile function in libavcodec/jpeg2000dec.c, which does not consider the component number in certain calculations. This allows remote attackers to cause a denia...

PT-2013-6235

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the flashsv decode frame function in libavcodec/flashsv.c, which does not properly validate a certain height value. This allows remote attackers to cause a denial of service...

PT-2013-6236

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the get siz function in libavcodec/jpeg2000dec.c, which does not ensure the expected sample separation. This allows remote attackers to cause a denial of service out-of-bounds...

PT-2013-6239

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the get cox function in libavcodec/jpeg2000dec.c, which does not properly validate the reduction factor. This allows remote attackers to cause a denial of service out-of-bounds...

CVE-2013-7017: Undefined Security Weakness

libavcodec/jpeg2000.c in FFmpeg before 2.1 allows remote attackers to cause a denial of service invalid pointer dereference or possibly have unspecified other impact via crafted JPEG2000 data...

CVE-2013-7022: Improper Restriction of Operations within the Bounds of a Memory Buffer

The g2minitbuffers function in libavcodec/g2meet.c in FFmpeg before 2.1 does not properly allocate memory for tiles, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted Go2Webinar data...

CVE-2013-7013: Undefined Security Weakness

The g2minitbuffers function in libavcodec/g2meet.c in FFmpeg before 2.1 uses an incorrect ordering of arithmetic operations, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted Go2Webinar data...

CVE-2013-7016: Improper Restriction of Operations within the Bounds of a Memory Buffer

The getsiz function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not ensure the expected sample separation, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JPEG2000 data...

CVE-2013-7020: Improper Restriction of Operations within the Bounds of a Memory Buffer

The readheader function in libavcodec/ffv1dec.c in FFmpeg before 2.1 does not properly enforce certain bit-count and colorspace constraints, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted FFV1 data...

PT-2013-1414

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.10 Description The issue is related to the smacker decode header tree function in libavcodec/smacker.c, which can be exploited by remote attackers using crafted Smacker data. Recommendations For versions prior to 0.1...

PT-2013-1413

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.10 Description The issue is related to the decode mb function in libavcodec/error resilience.c, which allows remote attackers to have an unspecified impact via vectors related to an uninitialized block index. This...

PT-2013-1417

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.10 Description The issue is related to the dirac decode data unit function in libavcodec/diracdec.c, which can be exploited by remote attackers through a crafted value in the reference pictures number. This can have ...