DEBIAN-CVE-2013-0850

The decodesliceheader function in libavcodec/h264.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted H.264 data, which triggers an out-of-bounds array access...

DEBIAN-CVE-2013-0858

The atrac3decodeinit function in libavcodec/atrac3.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via ATRAC3 data with the joint stereo coding mode set and fewer than two channels...

DEBIAN-CVE-2013-0844

Off-by-one error in the adpcmdecodeframe function in libavcodec/adpcm.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via crafted DK4 data, which triggers an out-of-bounds array access...

DEBIAN-CVE-2013-0849

The roqdecodeinit function in libavcodec/roqvideodec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted 1 width or 2 height dimension that is not a multiple of sixteen in id RoQ video data...

DEBIAN-CVE-2013-0846

Array index error in the qdm2decodesuperblock function in libavcodec/qdm2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted QDM2 data, which triggers an out-of-bounds array access...

CVE-2013-0848

The decodeinit function in libavcodec/huffyuv.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted width in huffyuv data with the predictor set to median and the colorspace set to YUV422P, which triggers an out-of-bounds array access...

CVE-2013-4446

The jsondecode function in plugins/contextreactionblock.inc in the Context module 6.x-2.x before 6.x-3.2 and 7.x-3.x before 7.x-3.0 for Drupal, when using a version of PHP that does not support the jsondecode function, allows remote attackers to execute arbitrary PHP code via unspecified vectors...

PT-2013-2653

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1 Description The issue is related to the roq decode init function in libavcodec/roqvideodec.c, which allows remote attackers to have an unspecified impact via a crafted width or height dimension that is not a multip...

PT-2013-2656

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1 Description The issue is related to an integer overflow in the alac decode close function, which can be triggered by a large number of samples per frame in Apple Lossless Audio Codec ALAC data. This leads to an...

DEBIAN-CVE-2013-0867

The decodesliceheader function in libavcodec/h264.c in FFmpeg before 1.1.2 does not properly check when the pixel format changes, which allows remote attackers to have unspecified impact via crafted H.264 video data, related to an out-of-bounds array access...

CVE-2013-0861

The avcodecdecodeaudio4 function in libavcodec/utils.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.1 allows remote attackers to trigger memory corruption via vectors related to the channel layout...

CVE-2013-0867

The decodesliceheader function in libavcodec/h264.c in FFmpeg before 1.1.2 does not properly check when the pixel format changes, which allows remote attackers to have unspecified impact via crafted H.264 video data, related to an out-of-bounds array access...

Heap overflow

The kempfdecodetile function in libavcodec/g2meet.c in FFmpeg before 2.0.1 allows remote attackers to cause a denial of service out-of-bounds heap write via a G2M4 encoded file...

PT-2013-1095

Name of the Vulnerable Software and Affected Versions libav versions prior to 1.1 Description The issue concerns multiple vulnerabilities in the libav package of the Debian GNU/Linux operating system, which can be exploited remotely to compromise the confidentiality, integrity, and availability o...

PT-2013-1094

Name of the Vulnerable Software and Affected Versions libav versions prior to the fixed version Description The issue concerns multiple vulnerabilities in the libav package of the Debian GNU/Linux operating system, which can be exploited remotely to compromise the confidentiality, integrity, and...

PT-2013-1091

Name of the Vulnerable Software and Affected Versions libav versions prior to 1.0.4 Description The issue concerns multiple vulnerabilities in the libav package of the Debian GNU/Linux operating system, which can be exploited remotely to compromise the confidentiality, integrity, and availability...

PT-2013-2662

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.0.4 FFmpeg versions 1.1.x prior to 1.1.2 Description A buffer overflow issue exists in the rle decode function, located in libavcodec/sanm.c, which can be triggered by crafted LucasArts Smush video data. This allows...

PT-2013-4925

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.0.1 Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds heap write, via a G2M4 encoded file. This is due to a problem in the kempf decode tile function...

PT-2013-2660

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.0.4 FFmpeg versions 1.1.x prior to 1.1.1 Description The issue allows remote attackers to trigger memory corruption via vectors related to the channel layout in the avcodec decode audio4 function. Recommendations For...

PT-2013-1097

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.0.4 FFmpeg versions 1.1.x prior to 1.1.2 Description The issue is related to the aac decode init function in libavcodec/aacdec.c, which allows remote attackers to have an unspecified impact via a large number of...