CVE-2017-5049

Removed by vendor...

Integer overflow

An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer...

CVE-2017-5037

CVE-2017-5037: In Chromium/Chromium-based browsers, multiple out-of-bounds writes were reported in the ChunkDemuxer component. A remote attacker could exploit crafted media content to trigger issues; affected versions include Chromium up to 57.0.2987.98.x. Upgrading to 57.0.2987.98 or newer mitig...

CVE-2017-5037

An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer...

CVE-2017-5037

Removed by vendor...

SUSE SLED12 / SLES12 Security Update : gstreamer-plugins-good (SUSE-SU-2017:1010-1)

This update for gstreamer-plugins-good fixes the following issues : - A crafted aac audio file could have caused an invalid read and thus corruption or denial of service bsc1024014, CVE-2016-10198 - A crafted mp4 file could have caused an invalid read and thus corruption or denial of service...

SUSE-SU-2017:1004-1 Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues: - A crafted aac audio file could have caused an invalid read and thus corruption or denial of service bsc1024014, CVE-2016-10198 - A crafted mp4 file could have caused an invalid read and thus corruption or denial of service...

CVE-2017-7208

The decoderesidual function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service buffer over-read or obtain sensitive information from process memory via a crafted h264 video file...

CVE-2017-7206

The ffh2645extractrbsp function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service heap-based buffer over-read or obtain sensitive information from process memory via a crafted h264 video file...

CVE-2017-7208

The decoderesidual function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service buffer over-read or obtain sensitive information from process memory via a crafted h264 video file...

UBUNTU-CVE-2017-7208

The decoderesidual function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service buffer over-read or obtain sensitive information from process memory via a crafted h264 video file...

Heap overflow

The ffh2645extractrbsp function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service heap-based buffer over-read or obtain sensitive information from process memory via a crafted h264 video file...

CVE-2017-7206

The ffh2645extractrbsp function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service heap-based buffer over-read or obtain sensitive information from process memory via a crafted h264 video file...

Design/Logic Flaw

The decoderesidual function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service buffer over-read or obtain sensitive information from process memory via a crafted h264 video file...

CVE-2017-7206

The ffh2645extractrbsp function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service heap-based buffer over-read or obtain sensitive information from process memory via a crafted h264 video file...

CVE-2017-7208

CVE-2017-7208 affects the libav/libavcodec decoder. The vulnerability is in the decode_residual function of libavcodec in Libav 9.21, which could be exploited by a crafted H.264 video file to cause a denial-of-service via a buffer over-read and potentially leak memory. The Debian security advisor...

CVE-2017-7206

The ffh2645extractrbsp function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service heap-based buffer over-read or obtain sensitive information from process memory via a crafted h264 video file...

CVE-2017-5037

An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer...

CVE-2017-5037

An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer...

Design/Logic Flaw

FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file...