CVE-2009-4635

FFmpeg 0.5 contains CVE-2009-4635, a vulnerability where a crafted MOV container with improperly ordered tags causes mov.c and utils.c to use inconsistent codec types/identifiers, leading to a video-structure pointer being passed to the mp3 decoder and a stack-based buffer overflow. The issue is ...

CVE-2009-4635

FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted MOV container with improperly ordered tags that cause 1 mov.c and 2 utils.c to use inconsistent codec types and identifiers, leading to processing of a video-structure pointer by the...

CVE-2009-4639

The avrescalernd function in the AVI demuxer in FFmpeg 0.5 allows remote attackers to cause a denial of service crash via a crafted AVI file that triggers a divide-by-zero error...

CVE-2009-4637

FFmpeg 0.5 is affected by CVE-2009-4637. The vulnerability is described as a stack-based buffer overflow that could be triggered by processing certain media inputs, allowing a remote attacker to cause a crash (DoS) and potentially execute arbitrary code. Public disclosures in the connected source...

CVE-2009-4633

FFmpeg 0.5 is affected by CVE-2009-4633: vorbis_dec.c contains an assignment operator where a comparison was intended, enabling a crafted file to trigger a heap-based buffer overflow, potentially causing DoS or arbitrary code execution. Mandriva/OpenVAS advisories reference FFmpeg-related fixes i...

CVE-2009-4632

oggparsevorbis.c in FFmpeg 0.5 does not properly perform certain pointer arithmetic, which might allow remote attackers to obtain sensitive memory contents and cause a denial of service via a crafted file that triggers an out-of-bounds read...

FFmpeg vmd_read_header Integer Overflow

FFmpeg is a set of libraries and executables that can be used to record, convert and stream digital audio and video in numerous formats. FFmpeg is a command line tool that is composed of a collection of free software / open source libraries.FFmpeg has the ability to convert between different medi...

CVE-2009-4634

Multiple integer underflows in FFmpeg 0.5 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted file that 1 bypasses a validation check in vorbisdec.c and triggers a wraparound of the stack pointer, or 2 access a pointer from out-of-bounds memory in...

CVE-2009-4640

Array index error in vorbisdec.c in FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Vorbis file that triggers an out-of-bounds read...

CVE-2009-4639

The avrescalernd function in the AVI demuxer in FFmpeg 0.5 allows remote attackers to cause a denial of service crash via a crafted AVI file that triggers a divide-by-zero error...

CVE-2009-4635

FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted MOV container with improperly ordered tags that cause 1 mov.c and 2 utils.c to use inconsistent codec types and identifiers, leading to processing of a video-structure pointer by the...

CVE-2009-4633

vorbisdec.c in FFmpeg 0.5 uses an assignment operator when a comparison operator was intended, which might allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted file that modifies a loop counter and triggers a heap-based buffer overflow...

CVE-2009-4637

FFmpeg 0.5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors that trigger a stack-based buffer overflow...

FFmpeg OGV File Format Memory Corruption

FFmpeg is a set of libraries and executables that can be used to record, convert and stream digital audio and video in numerous formats. FFmpeg is a command line tool that is composed of a collection of free software / open source libraries. FFmpeg has the ability to convert between, and play,...

Mandriva Security Advisory MDVSA-2009:335 (ffmpeg)

The remote host is missing an update to ffmpeg announced via advisory MDVSA-2009:335. OpenVAS Vulnerability Test $Id: mdksa2009335.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:335 ffmpeg Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

Mandriva Security Advisory MDVSA-2009:335 (ffmpeg)

The remote host is missing an update to ffmpeg announced via advisory MDVSA-2009:335. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandriva Linux Security Advisory : ffmpeg (MDVSA-2009:335)

A vulnerability was discovered and corrected in ffmpeg : MPlayer allows remote attackers to cause a denial of service application crash via 1 a malformed AAC file, as demonstrated by lol-vlc.aac; or 2 a malformed Ogg Media OGM file, as demonstrated by lol-ffplay.ogm, different vectors than...

Mandriva Security Advisory MDVSA-2009:297-1 (ffmpeg)

The remote host is missing an update to ffmpeg announced via advisory MDVSA-2009:297-1. OpenVAS Vulnerability Test $Id: mdksa20092971.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:297-1 ffmpeg Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Mandriva Security Advisory MDVSA-2009:297-1 (ffmpeg)

The remote host is missing an update to ffmpeg announced via advisory MDVSA-2009:297-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandriva Security Advisory MDVSA-2009:297 (ffmpeg)

The remote host is missing an update to ffmpeg announced via advisory MDVSA-2009:297. OpenVAS Vulnerability Test $Id: mdksa2009297.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:297 ffmpeg Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...