PT-2011-3649

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.5.4 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, by providing a specially crafted APE file that contains a header but no frames. This is due to a...

CVE-2011-2161: Undefined Security Weakness

The apereadheader function in ape.c in libavformat in FFmpeg before 0.5.4, as used in MPlayer, VideoLAN VLC media player, and other products, allows remote attackers to cause a denial of service application crash via an APE aka Monkey's Audio file that contains a header but no frames...

FreeBSD : ffmpeg -- 4xm processing memory corruption vulnerability (6733e1bf-125f-11de-a964-0030843d3802)

Secunia reports : Tobias Klein has reported a vulnerability in FFmpeg, which potentially can be exploited by malicious people to compromise an application using the library. The vulnerability is caused due to a signedness error within the 'fourxmreadheader' function in libavformat/4xm.c. This can...

CVE-2009-0385

Summary (CVE-2009-0385): FFmpeg’s fourxm demuxer contains an integer signedness error in libavformat/4xm.c (function fourxm_read_header). Before revision 16846, this allows a remote attacker to craft a malformed 4X movie file with a large current_track value, triggering a NULL pointer dereference...

CVE-2009-0385

Integer signedness error in the fourxmreadheader function in libavformat/4xm.c in FFmpeg before revision 16846 allows remote attackers to execute arbitrary code via a malformed 4X movie file with a large currenttrack value, which triggers a NULL pointer dereference...

[TKADV2009-004] FFmpeg Type Conversion Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: FFmpeg Type Conversion Vulnerability Advisory ID: TKADV2009-004 Revision: 1.0 Release Date: 2009/01/28 Last Modified: 2009/01/28 Date Reported: 2009/01/25 Author: Tobias Klein tk at trapkit.de Affected Software: FFmpeg SVN trunk revision 168...

ffmpeg -- 4xm processing memory corruption vulnerability

Secunia reports: Tobias Klein has reported a vulnerability in FFmpeg, which potentially can be exploited by malicious people to compromise an application using the library. The vulnerability is caused due to a signedness error within the "fourxmreadheader" function in libavformat/4xm.c. This can ...

GLSA-200901-07 : MPlayer: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200901-07 MPlayer: Multiple vulnerabilities Multiple vulnerabilities have been reported in MPlayer: A stack-based buffer overflow was found in the strreadpacket function in libavformat/psxstr.c when processing crafted STR files th...

DEBIAN-CVE-2008-4866

Multiple buffer overflows in libavformat/utils.c in FFmpeg 0.4.9 before r14715, as used by MPlayer, allow context-dependent attackers to have an unknown impact via vectors related to execution of DTS generation code with a delay greater than MAXREORDERDELAY...

CVE-2008-4866

Multiple buffer overflows in libavformat/utils.c in FFmpeg 0.4.9 before r14715, as used by MPlayer, allow context-dependent attackers to have an unknown impact via vectors related to execution of DTS generation code with a delay greater than MAXREORDERDELAY...

Buffer overflow

Multiple buffer overflows in libavformat/utils.c in FFmpeg 0.4.9 before r14715, as used by MPlayer, allow context-dependent attackers to have an unknown impact via vectors related to execution of DTS generation code with a delay greater than MAXREORDERDELAY...

CVE-2008-4866

Multiple buffer overflows in libavformat/utils.c in FFmpeg 0.4.9 before r14715, as used by MPlayer, allow context-dependent attackers to have an unknown impact via vectors related to execution of DTS generation code with a delay greater than MAXREORDERDELAY...

CVE-2008-4866

CVE-2008-4866 concerns FFmpeg 0.4.9 (before r14715) via libavformat/utils.c, where multiple buffer overflows could be triggered in the DTS generation path if a delay exceeds MAX_REORDER_DELAY. The FFmpeg component is used by MPlayer, so a context-dependent attacker could potentially execute arbit...

CVE-2008-4866

Multiple buffer overflows in libavformat/utils.c in FFmpeg 0.4.9 before r14715, as used by MPlayer, allow context-dependent attackers to have an unknown impact via vectors related to execution of DTS generation code with a delay greater than MAXREORDERDELAY...

CVE-2008-4866

Multiple buffer overflows in libavformat/utils.c in FFmpeg 0.4.9 before r14715, as used by MPlayer, allow context-dependent attackers to have an unknown impact via vectors related to execution of DTS generation code with a delay greater than MAXREORDERDELAY...

CVE-2008-4866: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in libavformat/utils.c in FFmpeg 0.4.9 before r14715, as used by MPlayer, allow context-dependent attackers to have an unknown impact via vectors related to execution of DTS generation code with a delay greater than MAXREORDERDELAY...

FFmpeg libavformat 'psxstr.c' STR数据堆缓冲区溢出漏洞

BUGTRAQ ID: 30154 CNCAN ID：CNCAN-2008071004 FFmpeg是一款用于录制、转换和流化音频和视频的解决方案。 FFmpeg psxstr.c:319处理STR数据存在堆溢出问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 由于在解析STR数据时，拷贝过程中缺少充分的边界检查，可导致触发基于堆的溢出。攻击者可以构建特殊的STR文件，诱使用户访问来触发。 FFmpeg FFmpeg CVS + Ubuntu Ubuntu Linux 5.0 4 powerpc + Ubuntu Ubuntu Linux 5.0 4 i386 + Ubuntu...

FFmpeg libavformat - psxstr.c STR Data Heap Buffer Overflow

FFmpeg libavformat - psxstr.c STR Data Heap Buffer Overflow source: https://www.securityfocus.com/bid/30154/info The 'libavformat' library from FFmpeg is prone to a remote heap-based buffer-overflow vulnerability because of insufficient boundary checks when parsing STR data. Remote attackers can...

mplayer -- vulnerability in STR files processor

Secunia reports: The vulnerability is caused due to a boundary error within the "strreadpacket" function in libavformat/psxstr.c. This can be exploited to cause a heap-based buffer overflow via a specially crafted STR file...

FFmpeg libavformat - 'psxstr.c' STR Data Heap Buffer Overflow

source: https://www.securityfocus.com/bid/30154/info The 'libavformat' library from FFmpeg is prone to a remote heap-based buffer-overflow vulnerability because of insufficient boundary checks when parsing STR data. Remote attackers can exploit this issue by enticing victims into opening...