CVE-2011-3892

CVE-2011-3892: FFmpeg/libavcodec Theora decoder contains a double‑free vulnerability exploitable via a crafted Theora stream, allowing remote denial of service and possibly other impact. Connected advisories (Debian, Mandriva, FreeBSD VuXML) indicate multiple FFmpeg/libav issues and list CVE-2011...

CVE-2011-3892

Double free vulnerability in the Theora decoder in Google Chrome before 15.0.874.120 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted stream...

CVE-2011-3895

CVE-2011-3895 is a heap-based buffer overflow in FFmpeg’s Vorbis decoder (libavcodec) that can be triggered by a crafted input stream, potentially causing a denial of service or other unspecified impact. The connected documents indicate FFmpeg vulnerabilities across multiple CVEs, including this ...

CVE-2011-3895: Out-of-bounds Write

Heap-based buffer overflow in the Vorbis decoder in Google Chrome before 15.0.874.120 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted stream...

CVE-2011-3892: Double Free

Double free vulnerability in the Theora decoder in Google Chrome before 15.0.874.120 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted stream...

Google Chrome < 15.0.874.120 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 15.0.874.120. It is, therefore, potentially affected by the following vulnerabilities : - A double-free error exists in the Theora decoder. CVE-2011-3892 - Out-of-bounds read errors exist in the MVK and Vorbis media handler...

Mandriva Update for gimp MDVSA-2011:167 (gimp)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Debian DSA-2336-1 : ffmpeg - several vulnerabilities

Multiple vulnerabilities were found in FFmpeg, a multimedia player, server and encoder : - CVE-2011-3362 An integer signedness error in decoderesidualblock function of the Chinese AVS video CAVS decoder in libavcodec can lead to denial of service memory corruption and application crash or possibl...

[SECURITY] [DSA 2336-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2336-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez November 07, 2011 http://www.debian.org/security/faq -...

Mandriva Linux Security Advisory : gimp (MDVSA-2011:167)

A vulnerability has been discovered and corrected in gimp : The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gifreadlzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in...

CVE-2011-3504

The Matroska format decoder in FFmpeg before 0.8.3 does not properly allocate memory, which allows remote attackers to execute arbitrary code via a crafted file...

DEBIAN-CVE-2011-3504

The Matroska format decoder in FFmpeg before 0.8.3 does not properly allocate memory, which allows remote attackers to execute arbitrary code via a crafted file...

Format string

The Matroska format decoder in FFmpeg before 0.8.3 does not properly allocate memory, which allows remote attackers to execute arbitrary code via a crafted file...

CVE-2011-3504

FFmpeg’s Matroska format decoder (pre-0.8.3) contains a memory allocation flaw that can be triggered by a crafted file, allowing remote code execution. The issue affects FFmpeg versions before 0.8.3 and is addressed in later FFmpeg releases (0.8.3+; changelogs reference fixes in 0.8.4). No exploi...

CVE-2011-3504

The Matroska format decoder in FFmpeg before 0.8.3 does not properly allocate memory, which allows remote attackers to execute arbitrary code via a crafted file...

CVE-2011-3504: Improper Control of Generation of Code

The Matroska format decoder in FFmpeg before 0.8.3 does not properly allocate memory, which allows remote attackers to execute arbitrary code via a crafted file...

CVE-2011-3504

The Matroska format decoder in FFmpeg before 0.8.3 does not properly allocate memory, which allows remote attackers to execute arbitrary code via a crafted file...

Debian Security Advisory DSA 2306-1 (ffmpeg)

The remote host is missing an update to ffmpeg announced via advisory DSA 2306-1. OpenVAS Vulnerability Test $Id: deb23061.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2306-1 ffmpeg Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Fedora 16 : pl-5.10.2-5.fc16 (2011-11229)

Fix bugs in GIF image decoder Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Debian DSA-2306-1 : ffmpeg - several vulnerabilities

Several vulnerabilities have been discovered in FFmpeg, a multimedia player, server and encoder. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-3908 FFmpeg before 0.5.4, allows remote attackers to cause a denial of service memory corruption and...