CVE-2011-0722

FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service heap memory corruption and application crash or possibly execute arbitrary code via a malformed RealMedia file...

CVE-2011-0723

FFmpeg 0.5.x, as used in MPlayer and other products, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a malformed VC-1 file...

CVE-2011-2162

Multiple unspecified vulnerabilities in FFmpeg 0.4.x through 0.6.x, as used in MPlayer 1.0 and other products, in Mandriva Linux 2009.0, 2010.0, and 2010.1; Corporate Server 4.0 aka CS4.0; and Mandriva Enterprise Server 5 aka MES5 have unknown impact and attack vectors, related to issues...

CVE-2011-2160

The VC-1 decoding functionality in FFmpeg before 0.5.4, as used in MPlayer and other products, does not properly restrict read operations, which allows remote attackers to have an unspecified impact via a crafted VC-1 file, a related issue to CVE-2011-0723...

MDVA-2011:020 : ffmpeg

ffmpeg as shipped in Mandriva 2010.2 was built without PNG support. This update enables PNG in ffmpeg's libavcodec library. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security,...

Mandriva Update for mplayer MDVSA-2011:088 (mplayer)

Check for the Version of mplayer OpenVAS Vulnerability Test Mandriva Update for mplayer MDVSA-2011:088 mplayer Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for mplayer MDVSA-2011:089 (mplayer)

Check for the Version of mplayer OpenVAS Vulnerability Test Mandriva Update for mplayer MDVSA-2011:089 mplayer Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for ffmpeg MDVA-2011:020 (ffmpeg)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for mplayer MDVSA-2011:089 (mplayer)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for mplayer MDVSA-2011:088 (mplayer)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Linux Security Advisory : mplayer (MDVSA-2011:089)

Multiple vulnerabilities have been identified and fixed in mplayer : FFmpeg 0.5 allows remote attackers to cause a denial of service hang via a crafted file that triggers an infinite loop. CVE-2009-4636 flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products,...

NGS00068 Patch Notification: LibAVCodec AMV Out of Array Write

LibAVCodec AMV Out of Array Write 27/04/2011 Dominic Chell of NGS Secure has discovered a high risk vulnerability in LibAVCodec. Opening a malformed AMV file can result in an out of array write and potentially arbitrary code execution when using this library. Whilst the vulnerability may affect...

FFmpeg Real Media文件解析内存破坏远程代码执行漏洞

BUGTRAQ ID: 47149 CVE ID: CVE-2011-0722 FFmpeg是一个自由软件，可以执行音讯和视讯多种格式的录影、转档、串流功能，包含了libavcodec ─这是一个用于多个专案中音讯和视讯的解码器函式库，以及 libavformat ——一个音讯与视讯格式转换函式库。 FFmpeg在解析畸形多媒体文件时存在内存破坏远程代码执行漏洞，远程攻击者可利用此漏洞在受影响应用程序中执行任意代码，造成拒绝服务。 Ubuntu Linux 9.x Ubuntu Linux 8.x Ubuntu Linux 10.x FFmpeg FFmpeg = 0.5.4 厂商补丁：...

FFmpeg畸形".wmv"文件解析内存破坏远程代码执行漏洞

BUGTRAQ ID: 47147 CVE ID: CVE-2010-3908 FFmpeg是一个自由软件，可以执行音讯和视讯多种格式的录影、转档、串流功能，包含了libavcodec ─这是一个用于多个专案中音讯和视讯的解码器函式库，以及 libavformat ——一个音讯与视讯格式转换函式库。 FFmpeg在解析畸形.wmv文件时存在内存破坏远程代码执行漏洞，远程攻击者可利用此漏洞在受影响应用程序中执行任意代码或造成拒绝服务。 Ubuntu Linux 9.x Ubuntu Linux 8.x Ubuntu Linux 10.x FFmpeg FFmpeg = 0.5.4 厂商补丁...

FFmpeg畸形"VC1"文件解析内存破坏远程代码执行漏洞

BUGTRAQ ID: 47151 CVE ID: CVE-2011-0723 FFmpeg是一个自由软件，可以执行音讯和视讯多种格式的录影、转档、串流功能，包含了libavcodec ─这是一个用于多个专案中音讯和视讯的解码器函式库，以及 libavformat ——一个音讯与视讯格式转换函式库。 FFmpeg在解析畸形VC1文件时存在内存破坏远程代码执行漏洞，远程攻击者可利用此漏洞在受影响应用程序中执行任意代码或造成拒绝服务。 Ubuntu Linux 9.x Ubuntu Linux 8.x Ubuntu Linux 10.x FFmpeg FFmpeg = 0.5.4 厂商补丁：...

Mandriva Update for ffmpeg MDVSA-2011:060 (ffmpeg)

Check for the Version of ffmpeg OpenVAS Vulnerability Test Mandriva Update for ffmpeg MDVSA-2011:060 ffmpeg Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for ffmpeg MDVSA-2011:062 (ffmpeg)

Check for the Version of ffmpeg OpenVAS Vulnerability Test Mandriva Update for ffmpeg MDVSA-2011:062 ffmpeg Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for ffmpeg MDVSA-2011:061 (ffmpeg)

Check for the Version of ffmpeg OpenVAS Vulnerability Test Mandriva Update for ffmpeg MDVSA-2011:061 ffmpeg Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for ffmpeg MDVSA-2011:061 (ffmpeg)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for ffmpeg MDVSA-2011:060 (ffmpeg)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...