ALPINE-CVE-2017-14059

In FFmpeg 3.3.3, a DoS in cinereadheader due to lack of an EOF check might cause huge CPU and memory consumption. When a crafted CINE file, which claims a large "duration" field in the header but does not contain sufficient backing data, is provided, the image-offset parsing loop would consume hu...

UnRAR 'Archive::ReadHeader15' function out-of-bounds read vulnerability

UnRAR is a command line document decompression program for use on Windows and Linux platforms. An out-of-bounds read vulnerability in the 'Archive::ReadHeader15' function of the UnRAR libunrar.a file allows remote attackers to exploit the vulnerability to construct a malicious file that can be...

DEBIAN-CVE-2016-10350

The archivereadformatcabreadheader function in archivereadsupportformatcab.c in libarchive 3.2.2 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

ALPINE-CVE-2017-5601

An error in the lhareadfileheader1 function archivereadsupportformatlha.c in libarchive 3.2.2 allows remote attackers to trigger an out-of-bounds read memory access and subsequently cause a crash via a specially crafted archive...

PT-2016-3283

Name of the Vulnerable Software and Affected Versions libarchive version 3.2.2 Description The issue is related to a heap-based buffer over-read and application crash in the archive read format cab read header function. This can be exploited by remote attackers using a crafted file, leading to a...

PT-2016-7385

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 3.1.4 Description The issue arises from a memory leak in the avi read header function when decoding an AVI file with a crafted "strh" structure. Recommendations For versions prior to 3.1.4, update to version 3.1.4 or...

PT-2016-3169

Name of the Vulnerable Software and Affected Versions FFmpeg version 3.3.3 Description The issue is related to a lack of an End of File EOF check in the mv read header function, which can cause huge CPU and memory consumption. This occurs when a crafted MV file with a large nb frames field in the...

PT-2016-3170

Name of the Vulnerable Software and Affected Versions FFmpeg versions 3.3.3 Description The issue is related to the ivr read header function in the FFmpeg multimedia library, specifically in libavformat/rmdec.c, and is caused by resource management errors. Exploitation of this issue can allow a...

PT-2016-3168

Name of the Vulnerable Software and Affected Versions FFmpeg version 3.3.3 Description The issue is related to a lack of an EOF End of File check in the rl2 read header function, which can cause huge CPU and memory consumption. This occurs when a crafted RL2 file with a large frame count field in...

PT-2016-3166

Name of the Vulnerable Software and Affected Versions FFmpeg version 3.3.3 Description The issue is related to a lack of an EOF check in the cine read header function, which can cause huge CPU and memory consumption. This occurs when a crafted CINE file with a large "duration" field in the header...

DEBIAN-CVE-2013-7011

The readheader function in libavcodec/ffv1dec.c in FFmpeg before 2.1 does not prevent changes to global parameters, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted FFV1 data...

DEBIAN-CVE-2013-0873

The readheader function in libavcodec/shorten.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid channel count, related to "freeing invalid addresses."...

PT-2013-2669

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.3 Description The issue is related to the read header function in libavcodec/shorten.c, which allows remote attackers to have an unspecified impact via an invalid channel count. This is related to "freeing invalid...

wireshark: buffer overflow in the ERF file reader

Heap-based buffer overflow in the erfreadheader function in wiretap/erf.c in the ERF file parser in Wireshark 1.4.0 through 1.4.9 and 1.6.x before 1.6.3 allows remote attackers to cause a denial of service application crash via a malformed file...

wireshark: buffer overflow in the ERF file reader

Heap-based buffer overflow in the erfreadheader function in wiretap/erf.c in the ERF file parser in Wireshark 1.4.0 through 1.4.9 and 1.6.x before 1.6.3 allows remote attackers to cause a denial of service application crash via a malformed file...

PT-2011-4847

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.4.0 through 1.4.9 Wireshark versions 1.6.x before 1.6.3 Description The issue is related to a heap-based buffer overflow in the erf read header function in the ERF file parser. This can be exploited by remote attackers via...