ffmpeg Contingency Disposal Error Vulnerability

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams. Under the LGPL or GPL license. It provides a complete solution for recording, converting, and streaming audio and video. A security vulnerability in readgab2sub in ffmpeg3.1.4...

FFmpeg Denial of Service Vulnerability (CNVD-2016-08274)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A denial of service vulnerability exists in FFmpeg version 3.1.2. An attacker can exploit this vulnerability to cause a denial of service...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks. A malicious user can pass a malicious AVI file containing a nctg structure to the system, causing an infinite loop in the system, leading to a denial of service...

SUSE SLES11 Security Update : MozillaFirefox (SUSE-SU-2016:2195-1)

Mozilla Firefox was updated to 45.3.0 ESR to fix the following issues bsc991809 : - MFSA 2016-62/CVE-2016-2835/CVE-2016-2836 Miscellaneous memory safety hazards rv:48.0 / rv:45.3 - MFSA 2016-63/CVE-2016-2830 Favicon network connection can persist when page is closed - MFSA 2016-64/CVE-2016-2838...

Information Disclosure

FFmpeg is vulnerable to information disclosures. A malicious user can cause the system to read out-of-bounds memory when decoding a malformed AIFF file...

PT-2016-3169

Name of the Vulnerable Software and Affected Versions FFmpeg version 3.3.3 Description The issue is related to a lack of an End of File EOF check in the mv read header function, which can cause huge CPU and memory consumption. This occurs when a crafted MV file with a large nb frames field in the...

PT-2016-3170

Name of the Vulnerable Software and Affected Versions FFmpeg versions 3.3.3 Description The issue is related to the ivr read header function in the FFmpeg multimedia library, specifically in libavformat/rmdec.c, and is caused by resource management errors. Exploitation of this issue can allow a...

PT-2016-3166

Name of the Vulnerable Software and Affected Versions FFmpeg version 3.3.3 Description The issue is related to a lack of an EOF check in the cine read header function, which can cause huge CPU and memory consumption. This occurs when a crafted CINE file with a large "duration" field in the header...

PT-2016-3167

Name of the Vulnerable Software and Affected Versions FFmpeg version 3.3.3 Description The issue is related to a lack of an End of File EOF check in the asf read marker function, which can cause significant CPU and memory consumption. This occurs when a crafted ASF file with a large "name len" or...

PT-2016-3168

Name of the Vulnerable Software and Affected Versions FFmpeg version 3.3.3 Description The issue is related to a lack of an EOF End of File check in the rl2 read header function, which can cause huge CPU and memory consumption. This occurs when a crafted RL2 file with a large frame count field in...

FFMpeg 3.1.2 release fixes from 360GearTeam a high-risk vulnerability-vulnerability warning-the black bar safety net

360GearTeamoriginal 3 6 0 smart scan teamsecurity researchers link a Han recent studies FFMpeg security, find the FFMpeg in decoding the swf file when there is a buffer overflow vulnerability number CVE-2 0 1 6-6 6 7 1 The. The vulnerability under certain conditions can lead to arbitrary code...

Information Disclosure

FFmpeg is vulnerable to information disclosure. The library reads out-of-bounds memory read when decoding with cavsdecode...

FFmpeg Buffer Overflow Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A buffer overflow vulnerability exists in FFmpeg versions 3.1.1, 3.1, and 2.8.5. An attacker can exploit this vulnerability to execute arbitrary code in the context of the affected...

CVE-2016-2839

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo cairosurfacegetextents calls that do not properly interact with libav header allocation in FFmpeg 0.10, which allows remote attackers to cause a denial of service application crash via a crafted video...

CVE-2016-2839

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo cairosurfacegetextents calls that do not properly interact with libav header allocation in FFmpeg 0.10, which allows remote attackers to cause a denial of service application crash via a crafted video...

Code injection

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo cairosurfacegetextents calls that do not properly interact with libav header allocation in FFmpeg 0.10, which allows remote attackers to cause a denial of service application crash via a crafted video...

CVE-2016-2839

CVE-2016-2839 affects Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux. The vulnerability stems from calls to cairo_surface_get_extents that do not properly interact with libav header allocation in FFmpeg 0.10, enabling a remote attacker to crash the application (denial of se...

CVE-2016-2839

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo cairosurfacegetextents calls that do not properly interact with libav header allocation in FFmpeg 0.10, which allows remote attackers to cause a denial of service application crash via a crafted video...

CVE-2016-2839: Improper Input Validation

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo cairosurfacegetextents calls that do not properly interact with libav header allocation in FFmpeg 0.10, which allows remote attackers to cause a denial of service application crash via a crafted video...

CVE-2016-2839

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo cairosurfacegetextents calls that do not properly interact with libav header allocation in FFmpeg 0.10, which allows remote attackers to cause a denial of service application crash via a crafted video...