CVE-2016-8595

CVE-2016-8595 affects FFmpeg’s gsm_parse in libavcodec/gsm_parser.c, where parsing a crafted AVI can trigger an assertion fault and cause DoS. Affected versions are FFmpeg before 3.1.5. The core issue is in the GSM parsing path; exploitation, workflow, or in-the-wild details are not provided beyo...

CVE-2016-7555

The avireadheader function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to memory leak when decoding an AVI file that has a crafted "strh" structure...

CVE-2016-7450

The fflog216bitc function in libavutil/intmath.h in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when it decodes a malformed AIFF file...

CVE-2016-6881

The zlibrefill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers to cause an infinite loop denial of service via a crafted SWF file...

CVE-2016-8595

The gsmparse function in libavcodec/gsmparser.c in FFmpeg before 3.1.5 allows remote attackers to cause a denial of service assert fault via a crafted AVI file...

CVE-2016-9561

CVE-2016-9561 : FFmpeg’s libavcodec/aacdec_template.c che_configure function allowed remote attackers to trigger a denial-of-service via a crafted MOV file by allocating a huge amount of memory. Affected: FFmpeg prior to 3.2.1 (as stated in the CVE description). Connected references confirm this ...

CVE-2016-7450

CVE-2016-7450 affects FFmpeg up to version 3.1.3. The vulnerable code path is the ff_log2_16bit_c function in libavutil/intmath.h, which can read out-of-bounds memory when decoding a malformed AIFF file. Impact per sources is an out-of-bounds read; exploitation details are not provided beyond thi...

CVE-2016-7785

The avireadseek function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service assert fault via a crafted AVI file...

CVE-2016-7502

The cavsidct8addc function in libavcodec/cavsdsp.c in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when decoding with cavsdecode...

CVE-2016-7905

The readgab2sub function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service NULL pointer used via a crafted AVI file...

CVE-2016-7450

The fflog216bitc function in libavutil/intmath.h in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when it decodes a malformed AIFF file...

CVE-2016-7562

The ffdrawpcfont function in libavcodec/cgadata.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service buffer overflow via a crafted AVI file...

CVE-2016-7555

The avireadheader function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to memory leak when decoding an AVI file that has a crafted "strh" structure...

CVE-2016-7502

The cavsidct8addc function in libavcodec/cavsdsp.c in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when decoding with cavsdecode...

Denial Of Service (DoS) And Remote Code Execution (RCE)

FFmpeg is vulnerable to denial of service DoS and remote code execution RCE attacks. A malicious user can pass a malicious SWF file to the server that can cause a denial of service via memory corruption or execute arbitrary code...

FFmpeg Denial of Service Vulnerability (CNVD-2016-12569)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A denial of service vulnerability exists in FFmpeg version 3.1.4. An attacker can exploit this vulnerability to cause an application crash denial of service...

FFmpeg Denial of Service Vulnerability (CNVD-2016-12568)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A denial of service vulnerability exists in FFmpeg 3.2 and earlier versions. An attacker can exploit this vulnerability to cause an application crash denial of service...

Debian Security Advisory DSA 3731-1 (chromium-browser - security update)

Several vulnerabilities have been discovered in the chromium web browser. CVE-2016-5181 A cross-site scripting issue was discovered. CVE-2016-5182 Giwan Go discovered a heap overflow issue. CVE-2016-5183 A use-after-free issue was discovered in the pdfium library. CVE-2016-5184 Another...

Ubuntu 14.04 LTS / 16.04 LTS : Oxide vulnerabilities (USN-3133-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3133-1 advisory. Multiple security vulnerabilities were discovered in Chromium. If a user were tricked in to opening a specially crafted website, an attacker...

Ubuntu: Security Advisory (USN-3133-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...