CVE-2015-8480

The VideoFramePool::PoolImpl::CreateFrame function in media/base/videoframepool.cc in Google Chrome before 47.0.2526.73 does not initialize memory for a video-frame data structure, which might allow remote attackers to cause a denial of service out-of-bounds memory access or possibly have...

CVE-2015-8480

The CVE-2015-8480 entry relates to Google Chrome before 47.0.2526.73. The vulnerability arises because VideoFramePool::PoolImpl::CreateFrame does not initialize memory for a video-frame data structure, enabling remote attackers to trigger a denial of service via out-of-bounds memory access, poten...

CVE-2015-8480

Removed by vendor...

WordPress Cool Video Gallery 1.9 Command Injection Vulnerability

WordPress Cool Video Gallery plugin version 1.9 suffers from a remote command injection vulnerability. Title: Command Injection in cool-video-gallery v1.9 Wordpress plugin Author: Larry W. Cashdollar, @larry0 Download Site: https://wordpress.org/plugins/cool-video-gallery/ Vendor:...

FreeBSD : ffmpeg -- multiple vulnerabilities (b0da85af-21a3-4c15-a137-fe9e4bc86002)

NVD reports : The updatedimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service race...

FFmpeg 'smka_decode_frame'函数拒绝服务漏洞

No description provided by source...

FFmpeg jpeg2000_read_main_headers 函数拒绝服务漏洞

No description provided by source...

FFmpeg 'ff_ivi_init_planes'函数整数溢出漏洞

No description provided by source...

openSUSE Security Update : ffmpeg (openSUSE-2015-821)

The ffmpeg package was updated to version 2.8.2 to fix the following security and non security issues : - CVE-2015-8216: Fixed the ljpegdecodeyuvscan function in libavcodec/mjpegdec.c which could cause a denial of service out-of-bounds array access bnc955346. - CVE-2015-8217: Fixed the...

FFmpeg 'jpeg2000_read_main_headers' Function Denial of Service Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video. A denial of service vulnerability exists in the jpeg2000readmainheaders function in the libavcodec/jpeg2000dec.c file in FFmpeg versions prior to 2.6.5, 2.7.x versions prior to 2.7.3, and 2.8.2 and prior 2.8.x...

FFmpeg 'ff_ivi_init_planes' function integer overflow vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video. An integer overflow vulnerability exists in the ffiviinitplanes function in the libavcodec/ivi.c file in FFmpeg versions prior to 2.6.5, 2.7.x versions prior to 2.7.3, and 2.8.x versions 2.8.2 and prior. Allows...

FFmpeg 'smka_decode_frame' function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video. A security vulnerability exists in the smkadecodeframe function in the libavcodec / smacker.c file in FFmpeg versions prior to 2.6.5, 2.7.x versions prior to 2.7.3, and 2.8.x versions 2.8.2 and prior. An...

ffmpeg -- multiple vulnerabilities

NVD reports: The updatedimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service race conditi...

CVE-2015-8365

The smkadecodeframe function in libavcodec/smacker.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 does not verify that the data size is consistent with the number of channels, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly...

CVE-2015-8365

The smkadecodeframe function in libavcodec/smacker.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 does not verify that the data size is consistent with the number of channels, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly...

CVE-2015-8364

Integer overflow in the ffiviinitplanes function in libavcodec/ivi.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 allows remote attackers to cause a denial of service out-of-bounds heap-memory access or possibly have unspecified other impact via crafted image dimensions in...

CVE-2015-8364

Integer overflow in the ffiviinitplanes function in libavcodec/ivi.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 allows remote attackers to cause a denial of service out-of-bounds heap-memory access or possibly have unspecified other impact via crafted image dimensions in...

Out-of-bounds

The smkadecodeframe function in libavcodec/smacker.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 does not verify that the data size is consistent with the number of channels, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly...

CVE-2015-8363

The jpeg2000readmainheaders function in libavcodec/jpeg2000dec.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 does not enforce uniqueness of the SIZ marker in a JPEG 2000 image, which allows remote attackers to cause a denial of service out-of-bounds heap-memory access or...

Integer overflow

Integer overflow in the ffiviinitplanes function in libavcodec/ivi.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 allows remote attackers to cause a denial of service out-of-bounds heap-memory access or possibly have unspecified other impact via crafted image dimensions in...