7573 matches found
CVE-2006-4799
CVE-2006-4799 is a buffer overflow in ffmpeg for xine-lib prior to 1.1.2 that could allow context-dependent attackers to execute arbitrary code via a crafted AVI file and bad indexes. Documents provided include NVD data (base score 7.5, network vector, no authentication, partial confidentiality/i...
FFmpeg: Buffer overflows
Background FFmpeg is a very fast video and audio converter. Description FFmpeg contains buffer overflows in the AVI processing code. Impact An attacker could trigger the buffer overflows by enticing a user to load a specially crafted AVI file in an application using the FFmpeg library. This might...
FreeBSD : ffmpeg -- libavcodec buffer overflow vulnerability (964161cd-6715-11da-99f6-00123ffe8333)
Secunia reports : Simon Kilvington has reported a vulnerability in FFmpeg libavcodec, which can be exploited by malicious people to cause a DoS Denial of Service and potentially to compromise a user's system. The vulnerability is caused due to a boundary error in the 'avcodecdefaultgetbuffer'...
DSA-1004-1 vlc - buffer overflow
Bulletin has no description...
DSA-1005-1 xine-lib - buffer overflow
Bulletin has no description...
[SECURITY] [DSA 992-1] New ffmpeg packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 992-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 10th, 2006 http://www.debian.org/security/faq -...
DSA-992-1 ffmpeg - buffer overflow
Bulletin has no description...
GLSA-200603-03 : MPlayer: Multiple integer overflows
The remote host is affected by the vulnerability described in GLSA-200603-03 MPlayer: Multiple integer overflows MPlayer makes use of the FFmpeg library, which is vulnerable to a heap overflow in the avcodecdefaultgetbuffer function discovered by Simon Kilvington see GLSA 200601-06. Furthermore,...
MPlayer: Multiple integer overflows
Background MPlayer is a media player capable of handling multiple multimedia file formats. Description MPlayer makes use of the FFmpeg library, which is vulnerable to a heap overflow in the avcodecdefaultgetbuffer function discovered by Simon Kilvington see GLSA 200601-06. Furthermore, AFI Securi...
GLSA-200602-01 : GStreamer FFmpeg plugin: Heap-based buffer overflow
The remote host is affected by the vulnerability described in GLSA-200602-01 GStreamer FFmpeg plugin: Heap-based buffer overflow The GStreamer FFmpeg plugin contains derived code from the FFmpeg library, which is vulnerable to a heap overflow in the 'avcodecdefaultgetbuffer' function discovered b...
GStreamer FFmpeg plugin: Heap-based buffer overflow
Background The GStreamer FFmpeg plugin uses code from the FFmpeg library to provide fast colorspace conversion and multimedia decoders to the GStreamer open source media framework. Description The GStreamer FFmpeg plugin contains derived code from the FFmpeg library, which is vulnerable to a heap...
Ubuntu 4.10 / 5.04 / 5.10 : xine-lib vulnerability (USN-230-2)
USN-230-1 fixed a vulnerability in the ffmpeg library. The Xine library contains a copy of the ffmpeg code, thus it is vulnerable to the same flaw. For reference, this is the original advisory : Simon Kilvington discovered a buffer overflow in the avcodecdefaultgetbuffer function of the ffmpeg...
Ubuntu 5.04 : ffmpeg vulnerability (USN-230-1)
Simon Kilvington discovered a buffer overflow in the avcodecdefaultgetbuffer function of the ffmpeg library. By tricking an user into opening a malicious movie which contains specially crafted PNG images, this could be exploited to execute arbitrary code with the user's privileges. Note that...
Mandrake Linux Security Advisory : ffmpeg (MDKSA-2005:231)
Simon Kilvington discovered a vulnerability in FFmpeg libavcodec, which can be exploited by malicious people to cause a DoS Denial of Service and potentially to compromise a user's system. The vulnerability is caused due to a boundary error in the 'avcodecdefaultgetbuffer' function of 'utils.c' i...
Mandrake Linux Security Advisory : xine-lib (MDKSA-2005:228)
Simon Kilvington discovered a vulnerability in FFmpeg libavcodec, which can be exploited by malicious people to cause a DoS Denial of Service and potentially to compromise a user's system. The vulnerability is caused due to a boundary error in the 'avcodecdefaultgetbuffer' function of 'utils.c' i...
Mandrake Linux Security Advisory : mplayer (MDKSA-2005:230)
Simon Kilvington discovered a vulnerability in FFmpeg libavcodec, which can be exploited by malicious people to cause a DoS Denial of Service and potentially to compromise a user's system. The vulnerability is caused due to a boundary error in the 'avcodecdefaultgetbuffer' function of 'utils.c' i...
GLSA-200601-06 : xine-lib, FFmpeg: Heap-based buffer overflow
The remote host is affected by the vulnerability described in GLSA-200601-06 xine-lib, FFmpeg: Heap-based buffer overflow Simon Kilvington has reported a vulnerability in FFmpeg libavcodec. The flaw is due to a buffer overflow error in the 'avcodecdefaultgetbuffer' function. This function doesn't...
Mandrake Linux Security Advisory : gstreamer-ffmpeg (MDKSA-2005:232)
Simon Kilvington discovered a vulnerability in FFmpeg libavcodec, which can be exploited by malicious people to cause a DoS Denial of Service and potentially to compromise a user's system. The vulnerability is caused due to a boundary error in the 'avcodecdefaultgetbuffer' function of 'utils.c' i...
Mandrake Linux Security Advisory : xmovie (MDKSA-2005:229)
Simon Kilvington discovered a vulnerability in FFmpeg libavcodec, which can be exploited by malicious people to cause a DoS Denial of Service and potentially to compromise a user's system. The vulnerability is caused due to a boundary error in the 'avcodecdefaultgetbuffer' function of 'utils.c' i...
xine-lib, FFmpeg: Heap-based buffer overflow
Background xine is a GPL high-performance, portable and reusable multimedia playback engine. xine-lib is xine's core engine. FFmpeg is a very fast video and audio converter and is used in xine-lib. Description Simon Kilvington has reported a vulnerability in FFmpeg libavcodec. The flaw is due to ...