[SECURITY] [DLA 644-1] libav security update

Package : libav Version : 6:0.8.18-0+deb7u1 CVE ID : CVE-2015-1872 CVE-2015-5479 CVE-2016-7393 Multiple vulnerabilities have been found in libav: CVE-2015-1872 The ffmjpegdecodesof function in libavcodec/mjpegdec.c in Libav before 0.8.18 does not validate the number of components in a JPEG-LS Sta...

[SECURITY] [DSA 3685-1] libav security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3685-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 04, 2016 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3685-1 (libav - security update)

Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. A full list of the changes is available at https://git.libav.org/?p=libav.git;a=blob;f=Changelog;hb=refs/tags/v11.8 OpenVAS Vulnerability Test $Id: deb3685.nasl 6608 2017-07-07 12:05:05Z...

DLA-644-1 libav - security update

Bulletin has no description...

DSA-3685-1 libav - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3685-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Libav 'libavcodec/aacsbr.c' Denial of Service Vulnerability

Libav formerly FFmpeg is Libav team's set of cross-platform audio and video recording and conversion solutions. A denial of service vulnerability exists in Libav version 11.7, which can be exploited by remote attackers to cause a denial of service...

Libav Null Pointer Backward Reference Denial of Service Vulnerability

Libav is Libav team's set of cross-platform audio and video can be recorded, converted solution, which includes a libavcodec encoder. A null pointer back-reference exists in Libav, allowing an attacker to exploit the vulnerability to crash an application that references the library, resulting in ...

Libav 'ff_put_pixels8_xy2_mmx()' Denial of Service Vulnerability

Libav is Libav team's set of cross-platform audio and video can be recorded, converted solution, which includes a libavcodec encoder. Libav 'ffputpixels8xy2mmx' contains a null pointer back-reference that can be exploited to crash an application that references the library, resulting in a denial ...

Libav Stack Buffer Overflow Vulnerability

Libav formerly FFmpeg is Libav team's set of cross-platform audio and video can be recorded, converted to a solution, which includes a libavcodec encoder. A stack buffer overflow vulnerability exists in Libav version 11.3. A remote attacker could use this vulnerability to execute arbitrary code i...

Libav 'resample.c' heap buffer overflow vulnerability

Libav formerly FFmpeg is Libav team's set of cross-platform audio and video can be recorded, converted to a solution, which includes a libavcodec encoder. A heap buffer overflow vulnerability exists in Libav version 11.3. The vulnerability stems from the program failing to perform proper boundary...

CVE-2016-2839

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo cairosurfacegetextents calls that do not properly interact with libav header allocation in FFmpeg 0.10, which allows remote attackers to cause a denial of service application crash via a crafted video...

Code injection

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo cairosurfacegetextents calls that do not properly interact with libav header allocation in FFmpeg 0.10, which allows remote attackers to cause a denial of service application crash via a crafted video...

UBUNTU-CVE-2016-2839

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo cairosurfacegetextents calls that do not properly interact with libav header allocation in FFmpeg 0.10, which allows remote attackers to cause a denial of service application crash via a crafted video...

Cairo rendering crash due to memory allocation issue with FFmpeg 0.10 — Mozilla

Security researcher Bert Massop reported a crash in the Cairo graphics layer on Linux systems using the LibAV library included in version 0.10 of the FFmpeg library. This was due to an error when allocating the LibAV header when decoding some videos...

openSUSE Security Update : libav (openSUSE-2016-779)

This update for libav fixes the two following security issues : - CVE-2016-3062: A MP4 memory corruption was fixed that could lead to crashes or code execution. boo984487 - CVE-2015-5479: A crash due to a divide by zero was fixed in ffh263decodemba that could lead to decoder crashes. boo949760...

Libav 'mov_read_dref' Function Denial of Service Vulnerability

Libav is a cross-platform solution for recording and converting audio and video from the Libav team, and FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A denial of service vulnerability exists in the 'movreaddref' function in the...

CVE-2016-3062

The movreaddref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via the entries value in a dref box in an MP4 file...

CVE-2016-3062

The movreaddref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via the entries value in a dref box in an MP4 file...

CVE-2016-3062

The movreaddref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via the entries value in a dref box in an MP4 file...