7733 matches found
CVE-2011-3949
CVE-2011-3949 affects FFmpeg: the dirac_unpack_idwt_params function in libavcodec/diracdec.c (FFmpeg prior to 0.10) can be triggered by crafted Dirac data to cause an unspecified impact. The connected advisories reiterate the exact description and note that remediation involves upgrading FFmpeg. ...
CVE-2013-7023
CVE-2013-7023 affects FFmpeg prior to 2.1 in libavcodec/parser.c, specifically ff_combine_frame, where certain memory-allocation errors are not handled correctly. This can enable remote attackers to cause a denial of service via out-of-bounds accesses, or potentially have other unspecified impact...
CVE-2013-7018
FFmpeg vulnerable component: libavcodec/jpeg2000dec.c in FFmpeg prior to 2.1. The issue allows remote attackers to trigger a denial of service via out-of-bounds array access when processing crafted JPEG2000 data due to invalid code-block dimension values. Impact includes DoS (and possibly other u...
CVE-2013-7013
The g2minitbuffers function in libavcodec/g2meet.c in FFmpeg before 2.1 uses an incorrect ordering of arithmetic operations, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted Go2Webinar data...
CVE-2013-7008
The decodesliceheader function in libavcodec/h264.c in FFmpeg before 2.1 incorrectly relies on a certain droppable field, which allows remote attackers to cause a denial of service deadlock or possibly have unspecified other impact via crafted H.264 data...
CVE-2011-3934
CVE-2011-3934 is a double-free vulnerability in FFmpeg’s libavcodec/vp3.c (vp3_update_thread_context) that affects FFmpeg before 0.10, enabling a remote attacker to cause an unspecified impact via crafted vp3 data. Connected advisories (e.g., Debian DSA-3003-1, Gentoo GLSA 201502-08) group this w...
CVE-2011-3944
The CVE-2011-3944 entry concerns FFmpeg's libavcodec/smacker.c: the smacker_decode_header_tree function in FFmpeg up to version before 0.10 can be triggered by crafted Smacker data, potentially causing unspecified impact on remote hosts. The available connected records confirm FFmpeg/libavcodec a...
CVE-2013-7020
FFmpeg/libav is affected by CVE-2013-7020 due to improper enforcement of bit-count/colorspace constraints in read_header (FFV1 decoding), allowing an out-of-bounds read and potential DoS. Connected advisories (Debian DSA-3027-1, Gentoo GLSA 201603-06, Mandriva MDVSA-2014:227) confirm FFV1-related...
CVE-2011-3950
The CVE-2011-3950 issue affects FFmpeg up to version 0.10, specifically the dirac_decode_data_unit function in libavcodec/diracdec.c, allowing remote attackers to cause an unspecified impact via a crafted reference pictures number. Public sources in the connected documents confirm the vulnerabili...
CVE-2011-4351
Buffer overflow in FFmpeg before 0.5.6, 0.6.x before 0.6.4, 0.7.x before 0.7.8, and 0.8.x before 0.8.8 allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2013-7015
The flashsvdecodeframe function in libavcodec/flashsv.c in FFmpeg before 2.1 does not properly validate a certain height value, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted Flash Screen Video data...
CVE-2013-7012
Vulnerability (CVE-2013-7012) in FFmpeg affects the get_siz function in libavcodec/jpeg2000dec.c. FFmpeg versions before 2.1 do not prevent use of non-zero image offsets, enabling a remote attacker to cause a denial of service via out-of-bounds array access when processing crafted JPEG2000 data. ...
CVE-2013-7011
The readheader function in libavcodec/ffv1dec.c in FFmpeg before 2.1 does not prevent changes to global parameters, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted FFV1 data...
CVE-2013-7020
The readheader function in libavcodec/ffv1dec.c in FFmpeg before 2.1 does not properly enforce certain bit-count and colorspace constraints, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted FFV1 data...
CVE-2013-7018
libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not ensure the use of valid code-block dimension values, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JPEG2000 data...
CVE-2013-7012
The getsiz function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not prevent attempts to use non-zero image offsets, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JPEG2000 data...
CVE-2011-3935
The codecgetbuffer function in ffmpeg.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via vectors related to a crafted image size...
CVE-2013-7023
The ffcombineframe function in libavcodec/parser.c in FFmpeg before 2.1 does not properly handle certain memory-allocation errors, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted data...
CVE-2013-7022
The g2minitbuffers function in libavcodec/g2meet.c in FFmpeg before 2.1 does not properly allocate memory for tiles, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted Go2Webinar data...