Debian DLA-644-1 : libav security update

Multiple vulnerabilities have been found in libav : CVE-2015-1872 The ffmjpegdecodesof function in libavcodec/mjpegdec.c in Libav before 0.8.18 does not validate the number of components in a JPEG-LS Start Of Frame segment, which allows remote attackers to cause a denial of service out-of-bounds...

[SECURITY] [DLA 644-1] libav security update

Package : libav Version : 6:0.8.18-0+deb7u1 CVE ID : CVE-2015-1872 CVE-2015-5479 CVE-2016-7393 Multiple vulnerabilities have been found in libav: CVE-2015-1872 The ffmjpegdecodesof function in libavcodec/mjpegdec.c in Libav before 0.8.18 does not validate the number of components in a JPEG-LS Sta...

openSUSE Security Update : libav (openSUSE-2016-779)

This update for libav fixes the two following security issues : - CVE-2016-3062: A MP4 memory corruption was fixed that could lead to crashes or code execution. boo984487 - CVE-2015-5479: A crash due to a divide by zero was fixed in ffh263decodemba that could lead to decoder crashes. boo949760...

CVE-2015-5479

The ffh263decodemba function in libavcodec/ituh263dec.c in Libav before 11.5 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a file with crafted dimensions...

CVE-2015-5479

Libav’s ff_h263_decode_mba in libavcodec/ituh263dec.c is vulnerable before 11.5, allowing remote attackers to cause a denial of service (divide-by-zero and crash) via crafted dimensions. The issue stems from insufficient validation during H.263 MBA decoding. Impact is a crash; confidentiality/int...