Debian DSA-1781-1 : ffmpeg-debian - several vulnerabilities

Several vulnerabilities have been discovered in ffmpeg, a multimedia player, server and encoder. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0385 It was discovered that watching a malformed 4X movie file could lead to the execution of arbitrary...

[SECURITY] [DSA 1781-1] New ffmpeg-debian packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1781-1 [email protected] http://www.debian.org/security/ Steffen Joeris April 29, 2009 http://www.debian.org/security/faq -...

Mandriva Linux Security Advisory : ffmpeg (MDVSA-2009:015)

Several vulnerabilities have been discovered in ffmpeg, related to the execution of DTS generation code CVE-2008-4866 and incorrect handling of DCAMAXFRAMESIZE value CVE-2008-4867. The updated packages have been patched to prevent this. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandriva Linux Security Advisory : ffmpeg (MDVSA-2008:157)

A vulnerability was found in how ffmpeg handled STR file demuxing. If a user were tricked into processing a malicious STR file, a remote attacker could execute arbitrary code with user privileges via applications linked against ffmpeg CVE-2008-3162. The updated packages have been patched to corre...

Ubuntu 7.10 / 8.04 LTS / 8.10 : ffmpeg, ffmpeg-debian vulnerabilities (USN-734-1)

It was discovered that FFmpeg did not correctly handle certain malformed Ogg Media OGM files. If a user were tricked into opening a crafted Ogg Media file, an attacker could cause the application using FFmpeg to crash, leading to a denial of service. CVE-2008-4610 It was discovered that FFmpeg di...

Mandriva Update for ffmpeg MDVSA-2008:157 (ffmpeg)

Check for the Version of ffmpeg OpenVAS Vulnerability Test Mandriva Update for ffmpeg MDVSA-2008:157 ffmpeg Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Gentoo Security Advisory GLSA 200903-33 (ffmpeg gst-plugins-ffmpeg mplayer)

The remote host is missing updates announced in advisory GLSA 200903-33. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200903-33 (ffmpeg gst-plugins-ffmpeg mplayer)

The remote host is missing updates announced in advisory GLSA 200903-33. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Ubuntu Update for ffmpeg vulnerability USN-630-1

Ubuntu Update for Linux kernel vulnerabilities USN-630-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6301.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for ffmpeg vulnerability USN-630-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-630-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: ffmpeg

The remote host is missing an update to the system as announced in the referenced advisory. VID 6733e1bf-125f-11de-a964-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 6733e1bf-125f-11de-a964-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

GLSA-200903-33 : FFmpeg: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200903-33 FFmpeg: Multiple vulnerabilities Multiple vulnerabilities were found in FFmpeg: astrange reported a stack-based buffer overflow in the strreadpacket in libavformat/psxstr.c when processing .str files CVE-2008-3162...

FreeBSD Ports: ffmpeg

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Ubuntu USN-734-1 (ffmpeg-debian)

The remote host is missing an update to ffmpeg-debian announced via advisory USN-734-1. OpenVAS Vulnerability Test $Id: ubuntu7341.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7341.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-734-1 ffmpeg-debian Author...

FFmpeg: Multiple vulnerabilities

Background FFmpeg is a complete solution to record, convert and stream audio and video. gst-plugins-ffmpeg is a FFmpeg based gstreamer plugin which includes a vulnerable copy of FFmpeg code. Mplayer is a multimedia player which also includes a vulnerable copy of the code. Description Multiple...

Ubuntu: Security Advisory (USN-734-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : ffmpeg -- 4xm processing memory corruption vulnerability (6733e1bf-125f-11de-a964-0030843d3802)

Secunia reports : Tobias Klein has reported a vulnerability in FFmpeg, which potentially can be exploited by malicious people to compromise an application using the library. The vulnerability is caused due to a signedness error within the 'fourxmreadheader' function in libavformat/4xm.c. This can...

USN-734-1: FFmpeg vulnerabilities

It was discovered that FFmpeg did not correctly handle certain malformed Ogg Media OGM files. If a user were tricked into opening a crafted Ogg Media file, an attacker could cause the application using FFmpeg to crash, leading to a denial of service. CVE-2008-4610 It was discovered that FFmpeg di...

FFmpeg 4xm文件解析内存破坏漏洞

BUGTRAQ ID: 33502 CVECAN ID: CVE-2009-0385 FFmpeg是一套对音频和视频进行解码录制转换的完整方案。 Fmpeg在解析畸形的4X电影文件时存在类型转换漏洞，以下是libavformat/4xm.c文件中的有漏洞代码段： .. 93 static int fourxmreadheaderAVFormatContext s, 94 AVFormatParameters ap 95 .. 103 8 int currenttrack = -1; .. 106 9 fourxm-trackcount = 0; 107 10 fourxm-tracks ...

libxine -- multiple vulnerabilities

Multiple vulnerabilities were fixed in libxine 1.1.16.2. Tobias Klein reports: FFmpeg contains a type conversion vulnerability while parsing malformed 4X movie files. The vulnerability may be exploited by a remote attacker to execute arbitrary code in the context of FFmpeg or an application using...