CVE-2013-3674

The cdgdecodeframe function in cdgraphics.c in libavcodec in FFmpeg before 1.2.1 does not validate the presence of non-header data in a buffer, which allows remote attackers to cause a denial of service out-of-bounds array access and application crash via crafted CD Graphics Video data...

CVE-2013-3674

FFmpeg/libavcodec is affected by CVE-2013-3674. The cdg_decode_frame function in cdgraphics.c does not validate the presence of non-header data in the input buffer, enabling a remote attacker to trigger an out-of-bounds access and cause an application crash (denial of service) when processing CD ...

CVE-2013-3674

The cdgdecodeframe function in cdgraphics.c in libavcodec in FFmpeg before 1.2.1 does not validate the presence of non-header data in a buffer, which allows remote attackers to cause a denial of service out-of-bounds array access and application crash via crafted CD Graphics Video data...

CVE-2013-3673: Improper Restriction of Operations within the Bounds of a Memory Buffer

The gifdecodeframe function in gifdec.c in libavcodec in FFmpeg before 1.2.1 does not properly manage the disposal methods of frames, which allows remote attackers to cause a denial of service out-of-bounds array access and application crash via crafted GIF data...

CVE-2013-3670: Improper Restriction of Operations within the Bounds of a Memory Buffer

The rleunpack function in vmdav.c in libavcodec in FFmpeg git 20130328 through 20130501 does not properly use the bytestream2 API, which allows remote attackers to cause a denial of service out-of-bounds array access and application crash via crafted RLE data. NOTE: the vendor has listed this as ...

PT-2013-4558

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.2.1 Description The issue is related to the rle unpack function in vmdav.c in libavcodec, which does not properly use the bytestream2 API. This allows remote attackers to cause a denial of service, resulting in...

PT-2013-4560

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.2.1 Description The issue is related to the mm decode inter function in mmvideo.c in libavcodec, which does not validate the relationship between a horizontal coordinate and a width value. This allows remote attacker...

CVE-2013-3675: Improper Input Validation

The processframeobj function in sanm.c in libavcodec in FFmpeg before 1.2.1 does not validate width and height values, which allows remote attackers to cause a denial of service integer overflow, out-of-bounds array access, and application crash via crafted LucasArts Smush video data...

PT-2013-4563

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.2.1 Description The issue is related to the process frame obj function in sanm.c within the libavcodec component of FFmpeg. This function does not validate width and height values, allowing remote attackers to cause ...

PT-2013-4561

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.2.1 Description The issue arises from the gif decode frame function in gifdec.c in libavcodec, which does not properly manage the disposal methods of frames. This allows remote attackers to cause a denial of service,...

CVE-2013-3672: Improper Input Validation

The mmdecodeinter function in mmvideo.c in libavcodec in FFmpeg before 1.2.1 does not validate the relationship between a horizontal coordinate and a width value, which allows remote attackers to cause a denial of service out-of-bounds array access and application crash via crafted American Laser...

PT-2013-4562

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.2.1 Description The issue is related to the cdg decode frame function in libavcodec, which does not validate the presence of non-header data in a buffer. This allows remote attackers to cause a denial of service,...

CVE-2013-3674: Improper Input Validation

The cdgdecodeframe function in cdgraphics.c in libavcodec in FFmpeg before 1.2.1 does not validate the presence of non-header data in a buffer, which allows remote attackers to cause a denial of service out-of-bounds array access and application crash via crafted CD Graphics Video data...

CVE-2013-1872

The Intel drivers in Mesa 8.0.x and 9.0.x allow context-dependent attackers to cause a denial of service reachable assertion and crash and possibly execute arbitrary code via vectors involving 3d graphics that trigger an out-of-bounds array access, related to the fsvisitor::removedeadconstants...

CVE-2013-2495

The iffreadheader function in iff.c in libavformat in FFmpeg through 1.1.3 does not properly handle data sizes for Interchange File Format IFF data during operations involving a CMAP chunk or a video codec, which allows remote attackers to cause a denial of service integer overflow, out-of-bounds...

CVE-2013-2496

The msrledecode8162432 function in msrledec.c in libavcodec in FFmpeg through 1.1.3 does not properly determine certain end pointers, which allows remote attackers to cause a denial of service out-of-bounds array access and application crash or possibly have unspecified other impact via crafted...

CVE-2013-2496: Improper Restriction of Operations within the Bounds of a Memory Buffer

The msrledecode8162432 function in msrledec.c in libavcodec in FFmpeg through 1.1.3 does not properly determine certain end pointers, which allows remote attackers to cause a denial of service out-of-bounds array access and application crash or possibly have unspecified other impact via crafted...

PT-2013-3824

Name of the Vulnerable Software and Affected Versions FFmpeg versions through 1.1.3 Description The issue is related to the msrle decode 8 16 24 32 function in msrledec.c in libavcodec, which does not properly determine certain end pointers. This allows remote attackers to cause a denial of...

PT-2013-3823

Name of the Vulnerable Software and Affected Versions FFmpeg versions through 1.1.3 Description The issue is related to the handling of Interchange File Format IFF data in the iff read header function. This function does not properly handle data sizes during operations involving a CMAP chunk or a...

CVE-2013-2495

The iffreadheader function in iff.c in libavformat in FFmpeg through 1.1.3 does not properly handle data sizes for Interchange File Format IFF data during operations involving a CMAP chunk or a video codec, which allows remote attackers to cause a denial of service integer overflow, out-of-bounds...