CVE-2011-2162

Technical details (affected components, root cause, impact, fixes) are not publicly provided in the supplied documents; monitor for updates.

CVE-2011-0723

CVE-2011-0723 affects FFmpeg 0.5.x (as used in MPlayer and other products). A malformed VC-1 file can crash the application or potentially allow code execution. The Debian advisory DSA-2306-1 notes FFmpeg upgrades to 0.5.4 to fix this and related CVEs; OpenVAS entries corroborate multiple CVEs in...

CVE-2011-0723

FFmpeg 0.5.x, as used in MPlayer and other products, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a malformed VC-1 file...

CVE-2010-3908

FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a malformed WMV file...

CVE-2011-2160

The VC-1 decoding functionality in FFmpeg before 0.5.4, as used in MPlayer and other products, does not properly restrict read operations, which allows remote attackers to have an unspecified impact via a crafted VC-1 file, a related issue to CVE-2011-0723...

CVE-2011-0722

CVE-2011-0722 affects FFmpeg (before 0.5.4), used in MPlayer and other products, allowing remote attackers to cause a denial of service via a malformed RealMedia file, with heap memory corruption and possible code execution. Public references in Debian/DSA-2306-1 (ffmpeg) confirm the issue across...

CVE-2011-2161

CVE-2011-2161 affects FFmpeg’s libavformat ape_read_header in ape.c, with the vulnerability present in FFmpeg before 0.5.4. The flaw allows a remote attacker to cause a denial of service (application crash) by processing an APE/Monkey’s Audio file that contains a header but no frames, and is used...

CVE-2011-0722

FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service heap memory corruption and application crash or possibly execute arbitrary code via a malformed RealMedia file...

CVE-2011-0723

FFmpeg 0.5.x, as used in MPlayer and other products, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a malformed VC-1 file...

CVE-2010-3908

FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a malformed WMV file...

CVE-2011-2162

Multiple unspecified vulnerabilities in FFmpeg 0.4.x through 0.6.x, as used in MPlayer 1.0 and other products, in Mandriva Linux 2009.0, 2010.0, and 2010.1; Corporate Server 4.0 aka CS4.0; and Mandriva Enterprise Server 5 aka MES5 have unknown impact and attack vectors, related to issues...

CVE-2011-2161

The apereadheader function in ape.c in libavformat in FFmpeg before 0.5.4, as used in MPlayer, VideoLAN VLC media player, and other products, allows remote attackers to cause a denial of service application crash via an APE aka Monkey's Audio file that contains a header but no frames...

MDVA-2011:020 : ffmpeg

ffmpeg as shipped in Mandriva 2010.2 was built without PNG support. This update enables PNG in ffmpeg's libavcodec library. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security,...

Mandriva Update for ffmpeg MDVA-2011:020 (ffmpeg)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for mplayer MDVSA-2011:088 (mplayer)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Linux Security Advisory : mplayer (MDVSA-2011:089)

Multiple vulnerabilities have been identified and fixed in mplayer : FFmpeg 0.5 allows remote attackers to cause a denial of service hang via a crafted file that triggers an infinite loop. CVE-2009-4636 flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products,...

Mandriva Update for mplayer MDVSA-2011:089 (mplayer)

Check for the Version of mplayer OpenVAS Vulnerability Test Mandriva Update for mplayer MDVSA-2011:089 mplayer Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for mplayer MDVSA-2011:089 (mplayer)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for mplayer MDVSA-2011:088 (mplayer)

Check for the Version of mplayer OpenVAS Vulnerability Test Mandriva Update for mplayer MDVSA-2011:088 mplayer Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

NGS00068 Patch Notification: LibAVCodec AMV Out of Array Write

LibAVCodec AMV Out of Array Write 27/04/2011 Dominic Chell of NGS Secure has discovered a high risk vulnerability in LibAVCodec. Opening a malformed AMV file can result in an out of array write and potentially arbitrary code execution when using this library. Whilst the vulnerability may affect...