PT-2011-4485

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.8.3 Description The issue is related to the Matroska format decoder in FFmpeg, which does not properly allocate memory. This allows remote attackers to execute arbitrary code via a crafted file. Recommendations For...

CVE-2011-3504

The Matroska format decoder in FFmpeg before 0.8.3 does not properly allocate memory, which allows remote attackers to execute arbitrary code via a crafted file...

CVE-2011-3504: Improper Control of Generation of Code

The Matroska format decoder in FFmpeg before 0.8.3 does not properly allocate memory, which allows remote attackers to execute arbitrary code via a crafted file...

CVE-2011-3504

FFmpeg’s Matroska format decoder (pre-0.8.3) contains a memory allocation flaw that can be triggered by a crafted file, allowing remote code execution. The issue affects FFmpeg versions before 0.8.3 and is addressed in later FFmpeg releases (0.8.3+; changelogs reference fixes in 0.8.4). No exploi...

CVE-2011-3504

The Matroska format decoder in FFmpeg before 0.8.3 does not properly allocate memory, which allows remote attackers to execute arbitrary code via a crafted file...

CVE-2011-3504

The Matroska format decoder in FFmpeg before 0.8.3 does not properly allocate memory, which allows remote attackers to execute arbitrary code via a crafted file...

CVE-2011-3504

The Matroska format decoder in FFmpeg before 0.8.3 does not properly allocate memory, which allows remote attackers to execute arbitrary code via a crafted file...

Vulnerability in FFmpeg Matroska Format Decoder Could Allow Remote Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting FFmpeg version 0.8.0 and earlier. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor, FFmpeg. FFmpeg has remediat...

VideoLAN VLC Media Player MKV Demuxer Code Execution

Added: 06/27/2011 CVE: CVE-2011-0531 BID: 46060 OSVDB: 70698 Background VLC media player is a media player supporting various audio and video formats for multiple platforms. Problem VideoLan VLC 1.1.6.1 and earlier are vulnerable to a remote code execution vulnerability as a result of insufficien...

VideoLAN VLC Media Player MKV Demuxer Code Execution

Added: 06/27/2011 CVE: CVE-2011-0531 BID: 46060 OSVDB: 70698 Background VLC media player is a media player supporting various audio and video formats for multiple platforms. Problem VideoLan VLC 1.1.6.1 and earlier are vulnerable to a remote code execution vulnerability as a result of insufficien...

[SECURITY] [DSA 2159-1] vlc security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2159-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 10, 2011 http://www.debian.org/security/faq -...

VLC media player memory corruption

Memory corruption on Matroska/WebM сontainers parsing...

Debian DSA-2159-1 : vlc - missing input sanitising

Dan Rosenberg discovered that insufficient input validation in VLC's processing of Matroska/WebM containers could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Securit...

[SECURITY] [DSA 2159-1] vlc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2159-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 10, 2011 http://www.debian.org/security/faq -...

DSA-2159-1 vlc - missing input sanitising

Bulletin has no description...

DEBIAN-CVE-2011-0531

demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of service crash and execute arbitrary commands via a crafted MKV WebM or Matroska file that triggers memory corruption, related to "class mismatching" and the...

VLC Media Player < 1.1.7 MKV Input Validation Vulnerability

The version of VLC media player installed on the remote host is earlier than 1.1.7. Such versions are reportedly affected by the following vulnerability : - Insufficient input validation when parsing a specially crafted Matroska or WebM MKV file can be exploited to execute arbitrary code. C Tenab...

vlc -- Insufficient input validation in MKV demuxer

VLC team reports: When parsing an invalid MKV Matroska or WebM file, input validation are insufficient...

CVE-2010-4374

The inmkv plugin in Winamp before 5.6 allows remote attackers to cause a denial of service application crash via a Matroska Video MKV file containing a string with a crafted length...

Design/Logic Flaw

The inmkv plugin in Winamp before 5.6 allows remote attackers to cause a denial of service application crash via a Matroska Video MKV file containing a string with a crafted length...