Design/Logic Flaw

The decodeframe function in the KVG1 decoder kgv1dec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service crash and possibly...

Integer overflow

Integer overflow in the vp3dequant function in the VP3 decoder vp3.c in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of...

Memory corruption

The svq1decodeframe function in the SVQ1 decoder svq1dec.c in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of service...

CVE-2011-3945

The decodeframe function in the KVG1 decoder kgv1dec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service crash and possibly...

CVE-2011-4364

Buffer overflow in the Sierra VMD decoder in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9 and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of service crash and possibly...

CVE-2011-4579

The CVE-2011-4579 entry concerns the SVQ1 decoder function svq1_decode_frame in FFmpeg/libavcodec (svq1dec.c). A crafted SVQ1 stream can trigger a memory corruption vulnerability that allows remote denial of service, with impact described as a crash via a stream whose dimensions change. Affected ...

CVE-2011-4352

Integer overflow in the vp3dequant function in the VP3 decoder vp3.c in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of...

CVE-2011-4579

The svq1decodeframe function in the SVQ1 decoder svq1dec.c in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of service...

CVE-2011-4352

CVE-2011-4352 describes an integer overflow in the VP3 decoder’s vp3_dequant() in FFmpeg/libavcodec (and Libav) that can be triggered by a crafted VP3 stream, potentially causing a crash or remote code execution. Affected versions: FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9...

CVE-2011-4364

CVE-2011-4364 : A vulnerability in the Sierra VMD decoder within FFmpeg/libavcodec and Libav allows a crafted VMD file to cause a denial of service and potentially execute arbitrary code via a buffer overflow. Affected products/versions include FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x...

CVE-2011-4352

Integer overflow in the vp3dequant function in the VP3 decoder vp3.c in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of...

CVE-2011-4579

The svq1decodeframe function in the SVQ1 decoder svq1dec.c in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of service...

CVE-2012-0857

Multiple buffer overflows in the getqcx function in the J2K decoder j2kdec.c in libavcode in FFmpeg before 0.9.1 allow remote attackers to cause a denial of service application crash via unspecified vectors...

Buffer overflow

Multiple buffer overflows in the getqcx function in the J2K decoder j2kdec.c in libavcode in FFmpeg before 0.9.1 allow remote attackers to cause a denial of service application crash via unspecified vectors...

CVE-2012-0857

Multiple buffer overflows in the getqcx function in the J2K decoder j2kdec.c in libavcode in FFmpeg before 0.9.1 allow remote attackers to cause a denial of service application crash via unspecified vectors...

CVE-2012-0857

Multiple buffer overflows in the getqcx function in the J2K decoder j2kdec.c in libavcode in FFmpeg before 0.9.1 allow remote attackers to cause a denial of service application crash via unspecified vectors...

CVE-2012-0857

Multiple buffer overflows in the getqcx function in the J2K decoder j2kdec.c in libavcode in FFmpeg before 0.9.1 allow remote attackers to cause a denial of service application crash via unspecified vectors...

CVE-2012-0857

FFmpeg before 0.9.1 is affected by CVE-2012-0857 due to multiple buffer overflows in the get_qcx function (j2kdec.c) of the libavcodec library, enabling remote attackers to cause an application crash (denial of service). The vulnerability is triggered by unspecified vectors. The provided document...

David Koblas' GIF decoder LZW decoder buffer overflow

The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gifreadlzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the LZWReadByte functio...

David Koblas' GIF decoder LZW decoder buffer overflow

The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gifreadlzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the LZWReadByte functio...