openSUSE Security Update : ffmpeg (openSUSE-2016-1160)

ffmpeg was updated to 2.8.8 to fix the following issues, both bugs and security issues : - avformat/oggparsevp8: fix pts calculation on pages ending with an invisible frame - avcodec/mjpegdec: Do not try to detect last scan but apply idct after all scans for progressive jpeg -...

Audacity 2.0.5 DLL Hijack

A local dll injection vulnerability has been discovered in the official Audacity 2.0.5. Since the program is not specified with a fully qualified path name the program uses a fixed path to look for specific files or libraries. This path includes directories that may not be trusted or under user...

CVE-2013-0861

The avcodecdecodeaudio4 function in libavcodec/utils.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.1 allows remote attackers to trigger memory corruption via vectors related to the channel layout...

CVE-2013-2276

The avcodecdecodeaudio4 function in utils.c in libavcodec in FFmpeg before 1.1.3 does not verify the decoding state before proceeding with certain skip operations, which allows remote attackers to cause a denial of service out-of-bounds array access and application crash or possibly have...

DEBIAN-CVE-2011-3929

The avprivdvproducepacket function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service NULL pointer dereference and application cras...

MPlayer (r33064 Lite) Buffer Overflow + ROP exploit

Exploit for windows platform in category local exploits !/usr/bin/perl Exploit Title: Mplayer BOF + ROP Exploit Date: 04\05\2011 Author: NateM based on original WinXP non ROP exploit by C4SS!0 and h1ch4m Software Link:...

Xilisoft Video Converter Wizard - '.yuv' Stack Buffer Overflow

source: https://www.securityfocus.com/bid/38854/info Xilisoft Video Converter is prone to a stack-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to execute arbitrary code in the contex...

DEBIAN-CVE-2008-4868

Unspecified vulnerability in the avcodecclose function in libavcodec/utils.c in FFmpeg 0.4.9 before r14787, as used by MPlayer, has unknown impact and attack vectors, related to a free "on random pointers."...

CVE-2008-4868

Unspecified vulnerability in the avcodecclose function in libavcodec/utils.c in FFmpeg 0.4.9 before r14787, as used by MPlayer, has unknown impact and attack vectors, related to a free "on random pointers."...

CVE-2005-4048

Heap-based buffer overflow in the avcodecdefaultgetbuffer function utils.c in FFmpeg libavcodec 0.4.9-pre1 and earlier, as used in products such as 1 mplayer, 2 xine-lib, 3 Xmovie, and 4 GStreamer, allows remote attackers to execute arbitrary commands via small PNG images with palettes...