CVE-2017-9257

The mp4ffreadctts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 FAAD2 2.7 allows remote attackers to cause a denial of service large loop and CPU consumption via a crafted mp4 file...

CVE-2017-9256

CVE-2017-9256 affects FAAD2 2.7, where the mp4ff_read_stco function in common/mp4ff/mp4atom.c can be triggered by a crafted MP4 file to cause a denial of service (large loop and high CPU usage). Public references confirm the issue in FAAD2 2.7 and map to multiple CVE entries. Debian’s DLA-1077-1 ...

CVE-2017-9219

CVE-2017-9219 affects FAAD2 (Freeware Advanced Audio Decoder) 2.7. The vulnerability is in the mp4ff_read_stsc function (common/mp4ff/mp4atom.c) and allows remote attackers to trigger a denial-of-service through a crafted MP4 file, causing a memory allocation failure and application crash. Impact...

CVE-2017-9218

CVE-2017-9218 affects Freeware Advanced Audio Decoder 2 (FAAD2) 2.7. The vulnerable component is mp4ff_read_stsd in common/mp4ff/mp4atom.c, where crafted MP4 files can trigger an invalid memory read leading to an application crash (denial of service). Connected sources corroborate the same descri...

CVE-2017-9254

The mp4ffreadstts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 FAAD2 2.7 allows remote attackers to cause a denial of service large loop and CPU consumption via a crafted mp4 file...

CVE-2017-9222

The mp4ffparsetag function in common/mp4ff/mp4meta.c in Freeware Advanced Audio Decoder 2 FAAD2 2.7 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a crafted mp4 file...

CVE-2017-9219

The mp4ffreadstsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 FAAD2 2.7 allows remote attackers to cause a denial of service memory allocation error and application crash via a crafted mp4 file...

PT-2017-3758 · Audiocoding +1 · Faad2 +1

Name of the Vulnerable Software and Affected Versions: FAAD2 version 2.7 Description: The issue is related to the incorrect handling of mp4 files by the mp4ff read stts function in the FAAD2 software, which can lead to excessive CPU consumption. This can be exploited by remote attackers to cause ...

PT-2017-3905 · Faad2 +1 · Faad2 +1

Name of the Vulnerable Software and Affected Versions: FAAD2 version 2.7 Description: The issue is related to the mp4ff parse tag function, which can lead to a denial of service due to an infinite loop and CPU consumption when processing a crafted mp4 file. This allows remote attackers to exploit...

PT-2017-3907 · Faad2 Team +1 · Faad2 +1

Name of the Vulnerable Software and Affected Versions: FAAD2 version 2.7 Description: The issue is related to the mp4ff read stsc function, which can be exploited by remote attackers to cause a denial of service. This is achieved through a crafted mp4 file, leading to a large loop and significant...

FreeBSD Ports: faad2

The remote host is missing an update to the system as announced in the referenced advisory. VID 445ed958-b0d9-11dd-a55e-00163e000016 OpenVAS Vulnerability Test $ Description: Auto generated from VID 445ed958-b0d9-11dd-a55e-00163e000016 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Gentoo Security Advisory GLSA 200811-03 (faad2)

The remote host is missing updates announced in advisory GLSA 200811-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200811-03 (faad2)

The remote host is missing updates announced in advisory GLSA 200811-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: faad2

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD : faad2 -- heap overflow vulnerability (445ed958-b0d9-11dd-a55e-00163e000016)

CVE reports : Heap-based buffer overflow in the decodeMP4file function frontend/main.c in FAAD2 2.6.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MPEG-4 MP4 file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

GLSA-200811-03 : FAAD2: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200811-03 FAAD2: User-assisted execution of arbitrary code The ICST-ERCIS Peking University reported a heap-based buffer overflow in the decodeMP4file function in frontend/main.c. Impact : A remote attacker could entice a user to...

FAAD2 library buffer overflow

Buffer overflow on MPEG-4 files parsing...

[ GLSA 200811-03 ] FAAD2: User-assisted execution of arbitrary code

Gentoo Linux Security Advisory GLSA 200811-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

FAAD2: User-assisted execution of arbitrary code

Background FAAD2 is an open source MPEG-4 and MPEG-2 AAC decoder. Description The ICST-ERCIS Peking University reported a heap-based buffer overflow in the decodeMP4file function in frontend/main.c. Impact A remote attacker could entice a user to open a specially crafted MPEG-4 MP4 file in an...

CVE-2008-4201

Heap-based buffer overflow in the decodeMP4file function frontend/main.c in FAAD2 2.6.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MPEG-4 MP4 file...