CVE-2011-2160

CVE-2011-2160 affects FFmpeg (and usage in MPlayer and other products) where the VC-1 decoding path does not properly restrict read operations. This vulnerability could let a remote attacker craft a VC-1 file to trigger an unspecified impact. The issue is related to CVE-2011-0723. Affected softwa...

CVE-2011-2161

CVE-2011-2161 affects FFmpeg’s libavformat ape_read_header in ape.c, with the vulnerability present in FFmpeg before 0.5.4. The flaw allows a remote attacker to cause a denial of service (application crash) by processing an APE/Monkey’s Audio file that contains a header but no frames, and is used...

CVE-2011-2162

Multiple unspecified vulnerabilities in FFmpeg 0.4.x through 0.6.x, as used in MPlayer 1.0 and other products, in Mandriva Linux 2009.0, 2010.0, and 2010.1; Corporate Server 4.0 aka CS4.0; and Mandriva Enterprise Server 5 aka MES5 have unknown impact and attack vectors, related to issues...

CVE-2011-0723

FFmpeg 0.5.x, as used in MPlayer and other products, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a malformed VC-1 file...

CVE-2010-3908

FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a malformed WMV file...

CVE-2011-0722

FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service heap memory corruption and application crash or possibly execute arbitrary code via a malformed RealMedia file...

CVE-2011-2160

The VC-1 decoding functionality in FFmpeg before 0.5.4, as used in MPlayer and other products, does not properly restrict read operations, which allows remote attackers to have an unspecified impact via a crafted VC-1 file, a related issue to CVE-2011-0723...

CVE-2011-2162

Multiple unspecified vulnerabilities in FFmpeg 0.4.x through 0.6.x, as used in MPlayer 1.0 and other products, in Mandriva Linux 2009.0, 2010.0, and 2010.1; Corporate Server 4.0 aka CS4.0; and Mandriva Enterprise Server 5 aka MES5 have unknown impact and attack vectors, related to issues...

CVE-2011-2162

Technical details (affected components, root cause, impact, fixes) are not publicly provided in the supplied documents; monitor for updates.

CVE-2011-0723

CVE-2011-0723 affects FFmpeg 0.5.x (as used in MPlayer and other products). A malformed VC-1 file can crash the application or potentially allow code execution. The Debian advisory DSA-2306-1 notes FFmpeg upgrades to 0.5.4 to fix this and related CVEs; OpenVAS entries corroborate multiple CVEs in...

PT-2011-3650

Name of the Vulnerable Software and Affected Versions FFmpeg versions 0.4.x through 0.6.x MPlayer version 1.0 Description The issue concerns multiple unspecified vulnerabilities in FFmpeg, which is used in various products including MPlayer. These vulnerabilities were originally discovered by...

PT-2011-1447

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.5.4 MPlayer affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in memory corruption and application crash, or possibly execute arbitrary code via a...

PT-2011-2585

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.5.4 MPlayer affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in heap memory corruption and application crash, or possibly execute arbitrary code...

CVE-2011-2162: Undefined Security Weakness

Multiple unspecified vulnerabilities in FFmpeg 0.4.x through 0.6.x, as used in MPlayer 1.0 and other products, in Mandriva Linux 2009.0, 2010.0, and 2010.1; Corporate Server 4.0 aka CS4.0; and Mandriva Enterprise Server 5 aka MES5 have unknown impact and attack vectors, related to issues...

MPlayer SAMI Subtitle File Buffer Overflow

This module exploits a stack-based buffer overflow found in the handling of SAMI subtitles files in MPlayer SVN Versions before 33471. It currently targets SMPlayer 0.6.8, which is distributed with a vulnerable version of MPlayer. The overflow is triggered when an unsuspecting victim opens a movi...

Mandriva Update for mplayer MDVSA-2011:089 (mplayer)

Check for the Version of mplayer OpenVAS Vulnerability Test Mandriva Update for mplayer MDVSA-2011:089 mplayer Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for mplayer MDVSA-2011:088 (mplayer)

Check for the Version of mplayer OpenVAS Vulnerability Test Mandriva Update for mplayer MDVSA-2011:088 mplayer Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for mplayer MDVSA-2011:088 (mplayer)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for mplayer MDVSA-2011:089 (mplayer)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Linux Security Advisory : mplayer (MDVSA-2011:088)

Multiple vulnerabilities have been identified and fixed in mplayer : oggparsevorbis.c in FFmpeg 0.5 does not properly perform certain pointer arithmetic, which might allow remote attackers to obtain sensitive memory contents and cause a denial of service via a crafted file that triggers an...