Code injection

Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted ASF file...

CVE-2012-5360

Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted QT file...

CVE-2012-5360

Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted QT file...

CVE-2012-5360

Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted QT file...

CVE-2012-5359

Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted ASF file...

CVE-2012-5359

Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted ASF file...

CVE-2012-5359

Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted ASF file...

CVE-2012-5360

CVE-2012-5360 affects Libavcodec in FFmpeg prior to 0.11. The vulnerability allows remote code execution through a crafted QT file due to a memory/parse issue in libavcodec. Impact is remote code execution with high severity over network; requires no privileges but user interaction is not require...

CVE-2012-5360

Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted QT file...

CVE-2012-5359

CVE-2012-5359 affects FFmpeg’s Libavcodec prior to 0.11. The vulnerability arises in the libavcodec ASF (and QT/WMV) parsing path, where memory corruption can occur, allowing remote code execution. Exploitation requires a user to open a specially crafted ASF file (not automatically via email), wi...

CVE-2012-5360

Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted QT file...

CVE-2018-6621

The decodeframe function in libavcodec/utvideodec.c in FFmpeg through 3.2 allows remote attackers to cause a denial of service out of array read via a crafted AVI file...

CVE-2018-6621

The decodeframe function in libavcodec/utvideodec.c in FFmpeg through 3.2 allows remote attackers to cause a denial of service out of array read via a crafted AVI file...

CVE-2018-6621

The decodeframe function in libavcodec/utvideodec.c in FFmpeg through 3.2 allows remote attackers to cause a denial of service out of array read via a crafted AVI file...

CVE-2018-6621

The decodeframe function in libavcodec/utvideodec.c in FFmpeg through 3.2 allows remote attackers to cause a denial of service out of array read via a crafted AVI file...

CVE-2018-6621

CVE-2018-6621 affects FFmpeg/libavcodec/utvideodec.c: decode_frame allows remote attackers to trigger a denial of service (out-of-bounds/read) via a crafted AVI file. Debians/DLA-1630, DSA-4249 and related advisories show this was fixed by libav/ffmpeg package updates. The Debian entries explicit...

UBUNTU-CVE-2018-5766

In Libav through 12.2, there is an invalid memcpy in the avpacketref function of libavcodec/avpacket.c. Remote attackers could leverage this vulnerability to cause a denial of service segmentation fault via a crafted avi file...

CVE-2018-5766

CVE-2018-5766 affects Libav up to version 12.2, due to an invalid memcpy in av_packet_ref (libavcodec/avpacket.c). Remote attackers could trigger a denial of service (segmentation fault) via a crafted AVI file. Public references/contexts include: Debian DLA-1907-1 notes fixed packages in libav 6:...

CVE-2017-1000460

In line libavcodec/h264dec.c:500 in libavv13dev0, ffmpegn3.4, chromium56 prior Feb 13, 2017, the return value of initgetbits is ignored and getuegolomb&gb is called on an uninitialized getbits context, which causes a NULL deref exception...

CVE-2017-1000460

In line libavcodec/h264dec.c:500 in libavv13dev0, ffmpegn3.4, chromium56 prior Feb 13, 2017, the return value of initgetbits is ignored and getuegolomb&gb is called on an uninitialized getbits context, which causes a NULL deref exception...