PT-2011-3648

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.5.4 Description The VC-1 decoding functionality in FFmpeg does not properly restrict read operations, allowing remote attackers to have an unspecified impact via a crafted VC-1 file. Recommendations For versions prio...

PT-2011-2586

Name of the Vulnerable Software and Affected Versions FFmpeg versions 0.5.x Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, or possibly execute arbitrary code via a malformed VC-1 file. Recommendations For FFmpeg version 0.5.x, consid...

CVE-2011-2160: Improper Input Validation

The VC-1 decoding functionality in FFmpeg before 0.5.4, as used in MPlayer and other products, does not properly restrict read operations, which allows remote attackers to have an unspecified impact via a crafted VC-1 file, a related issue to CVE-2011-0723...

CVE-2011-0723: Undefined Security Weakness

FFmpeg 0.5.x, as used in MPlayer and other products, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a malformed VC-1 file...

Mandriva Linux Security Advisory : mplayer (MDVSA-2011:089)

Multiple vulnerabilities have been identified and fixed in mplayer : FFmpeg 0.5 allows remote attackers to cause a denial of service hang via a crafted file that triggers an infinite loop. CVE-2009-4636 flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products,...

CVE-2011-0723

FFmpeg 0.5.x, as used in MPlayer and other products, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a malformed VC-1 file...