PT-2013-2673

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.3 Description The issue is related to the old codec37 function in libavcodec/sanm.c, which allows remote attackers to have an impact via crafted LucasArts Smush data. This is due to an out-of-bounds array access wh...

PT-2013-2665

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.2 Description The issue is related to the decode slice header function in libavcodec/h264.c, which does not properly check when the pixel format changes. This allows remote attackers to have an unspecified impact v...

PT-2013-2672

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.3 Description The issue is related to multiple integer overflows in the old codec37 and old codec47 functions in libavcodec/sanm.c, which can be triggered by crafted LucasArts Smush data. This leads to an...

PT-2013-2663

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.2 Description The issue is related to an incorrect calculation in the gif copy img rect function, which can lead to an out-of-bounds array access when processing crafted GIF data. This can potentially allow remote...

CVE-2013-0878: Improper Restriction of Operations within the Bounds of a Memory Buffer

The advanceline function in libavcodec/targa.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via crafted Targa image data, related to an out-of-bounds array access...

PT-2013-2674

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.3 Description The issue is related to an out-of-bounds array access in the advance line function in libavcodec/targa.c, which can be triggered by crafted Targa image data. This allows remote attackers to have an...

PT-2013-2668

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.3 Description The issue is related to the swr init function in libswresample/swresample.c, which allows remote attackers to have an unspecified impact via an invalid or unsupported input or output channel layout...

CVE-2013-0867: Improper Input Validation

The decodesliceheader function in libavcodec/h264.c in FFmpeg before 1.1.2 does not properly check when the pixel format changes, which allows remote attackers to have unspecified impact via crafted H.264 video data, related to an out-of-bounds array access...

CVE-2013-0872: Improper Restriction of Operations within the Bounds of a Memory Buffer

The swrinit function in libswresample/swresample.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid or unsupported 1 input or 2 output channel layout, related to an out-of-bounds array access...

PT-2013-1092

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1 Description The issue is related to the decode slice header function in libavcodec/h264.c, which allows remote attackers to have an impact via crafted H.264 data, triggering an out-of-bounds array access. Multiple...

CVE-2013-0874: Improper Restriction of Operations within the Bounds of a Memory Buffer

The 1 doubles2str and 2 shorts2str functions in libavcodec/tiff.c in FFmpeg before 1.1.3 allow remote attackers to have an unspecified impact via a crafted TIFF image, related to an out-of-bounds array access...

Out-of-bounds

The IOSerialFamily driver in Apple iOS before 7 allows attackers to execute arbitrary code or cause a denial of service out-of-bounds array access via a crafted application...

CVE-2013-5139

The IOSerialFamily driver in Apple iOS before 7 allows attackers to execute arbitrary code or cause a denial of service out-of-bounds array access via a crafted application...

CVE-2013-5139

The IOSerialFamily driver in Apple iOS before 7 allows attackers to execute arbitrary code or cause a denial of service out-of-bounds array access via a crafted application...

CVE-2013-5139

The CVE-2013-5139 entry concerns the IOSerialFamily driver. The description (supported by multiple connected records) states that an out-of-bounds array access in IOSerialFamily could allow a crafted application to cause arbitrary code execution or a denial of service. Affected platforms include ...

CVE-2013-5139: Improper Restriction of Operations within the Bounds of a Memory Buffer

The IOSerialFamily driver in Apple iOS before 7 allows attackers to execute arbitrary code or cause a denial of service out-of-bounds array access via a crafted application...

PT-2013-5385

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7 Description The issue allows attackers to execute arbitrary code or cause a denial of service through an out-of-bounds array access via a crafted application. Recommendations For versions prior to 7, update to...

Out-of-bounds

The Intel drivers in Mesa 8.0.x and 9.0.x allow context-dependent attackers to cause a denial of service reachable assertion and crash and possibly execute arbitrary code via vectors involving 3d graphics that trigger an out-of-bounds array access, related to the fsvisitor::removedeadconstants...

CVE-2013-1872

The Intel drivers in Mesa 8.0.x and 9.0.x allow context-dependent attackers to cause a denial of service reachable assertion and crash and possibly execute arbitrary code via vectors involving 3d graphics that trigger an out-of-bounds array access, related to the fsvisitor::removedeadconstants...

CVE-2013-1872

The Intel drivers in Mesa 8.0.x and 9.0.x allow context-dependent attackers to cause a denial of service reachable assertion and crash and possibly execute arbitrary code via vectors involving 3d graphics that trigger an out-of-bounds array access, related to the fsvisitor::removedeadconstants...