FFmpeg Real Media文件解析内存破坏远程代码执行漏洞

BUGTRAQ ID: 47149 CVE ID: CVE-2011-0722 FFmpeg是一个自由软件，可以执行音讯和视讯多种格式的录影、转档、串流功能，包含了libavcodec ─这是一个用于多个专案中音讯和视讯的解码器函式库，以及 libavformat ——一个音讯与视讯格式转换函式库。 FFmpeg在解析畸形多媒体文件时存在内存破坏远程代码执行漏洞，远程攻击者可利用此漏洞在受影响应用程序中执行任意代码，造成拒绝服务。 Ubuntu Linux 9.x Ubuntu Linux 8.x Ubuntu Linux 10.x FFmpeg FFmpeg = 0.5.4 厂商补丁：...

FFmpeg畸形"VC1"文件解析内存破坏远程代码执行漏洞

BUGTRAQ ID: 47151 CVE ID: CVE-2011-0723 FFmpeg是一个自由软件，可以执行音讯和视讯多种格式的录影、转档、串流功能，包含了libavcodec ─这是一个用于多个专案中音讯和视讯的解码器函式库，以及 libavformat ——一个音讯与视讯格式转换函式库。 FFmpeg在解析畸形VC1文件时存在内存破坏远程代码执行漏洞，远程攻击者可利用此漏洞在受影响应用程序中执行任意代码或造成拒绝服务。 Ubuntu Linux 9.x Ubuntu Linux 8.x Ubuntu Linux 10.x FFmpeg FFmpeg = 0.5.4 厂商补丁：...

FFmpeg畸形".wmv"文件解析内存破坏远程代码执行漏洞

BUGTRAQ ID: 47147 CVE ID: CVE-2010-3908 FFmpeg是一个自由软件，可以执行音讯和视讯多种格式的录影、转档、串流功能，包含了libavcodec ─这是一个用于多个专案中音讯和视讯的解码器函式库，以及 libavformat ——一个音讯与视讯格式转换函式库。 FFmpeg在解析畸形.wmv文件时存在内存破坏远程代码执行漏洞，远程攻击者可利用此漏洞在受影响应用程序中执行任意代码或造成拒绝服务。 Ubuntu Linux 9.x Ubuntu Linux 8.x Ubuntu Linux 10.x FFmpeg FFmpeg = 0.5.4 厂商补丁...

Mandriva Update for ffmpeg MDVSA-2011:061 (ffmpeg)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for ffmpeg MDVSA-2011:062 (ffmpeg)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for ffmpeg MDVSA-2011:060 (ffmpeg)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Ubuntu: Security Advisory (USN-1104-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandriva Update for ffmpeg MDVSA-2011:060 (ffmpeg)

Check for the Version of ffmpeg OpenVAS Vulnerability Test Mandriva Update for ffmpeg MDVSA-2011:060 ffmpeg Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for ffmpeg MDVSA-2011:061 (ffmpeg)

Check for the Version of ffmpeg OpenVAS Vulnerability Test Mandriva Update for ffmpeg MDVSA-2011:061 ffmpeg Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for ffmpeg MDVSA-2011:062 (ffmpeg)

Check for the Version of ffmpeg OpenVAS Vulnerability Test Mandriva Update for ffmpeg MDVSA-2011:062 ffmpeg Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Ubuntu 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : ffmpeg vulnerabilities (USN-1104-1)

Cesar Bernardini and Felipe Andres Manzano discovered that FFmpeg incorrectly handled certain malformed flic files. If a user were tricked into opening a crafted flic file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of...

[USN-1104-1] FFmpeg vulnerabilities

=========================================================== Ubuntu Security Notice USN-1104-1 April 04, 2011 ffmpeg vulnerabilities CVE-2010-3429, CVE-2010-3908, CVE-2010-4704, CVE-2011-0480, CVE-2011-0722, CVE-2011-0723 =========================================================== A security issue...

USN-1104-1: FFmpeg vulnerabilities

Cesar Bernardini and Felipe Andres Manzano discovered that FFmpeg incorrectly handled certain malformed flic files. If a user were tricked into opening a crafted flic file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of...

Mandriva Linux Security Advisory : ffmpeg (MDVSA-2011:061)

Multiple vulnerabilities has been identified and fixed in ffmpeg : oggparsevorbis.c in FFmpeg 0.5 does not properly perform certain pointer arithmetic, which might allow remote attackers to obtain sensitive memory contents and cause a denial of service via a crafted file that triggers an...

Mandriva Linux Security Advisory : ffmpeg (MDVSA-2011:060)

Multiple vulnerabilities has been identified and fixed in ffmpeg : oggparsevorbis.c in FFmpeg 0.5 does not properly perform certain pointer arithmetic, which might allow remote attackers to obtain sensitive memory contents and cause a denial of service via a crafted file that triggers an...

Mandriva Linux Security Advisory : ffmpeg (MDVSA-2011:062)

Multiple vulnerabilities has been identified and fixed in ffmpeg : FFmpeg 0.5 allows remote attackers to cause a denial of service hang via a crafted file that triggers an infinite loop. CVE-2009-4636 flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allo...

Debian: Security Advisory (DSA-2165-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2165-1 (ffmpeg-debian)

The remote host is missing an update to ffmpeg-debian announced via advisory DSA 2165-1. OpenVAS Vulnerability Test $Id: deb21651.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2165-1 ffmpeg-debian Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft...

Debian DSA-2165-1 : ffmpeg-debian - buffer overflow

Several vulnerabilities have been discovered in FFmpeg coders, which are used by MPlayer and other applications. - CVE-2010-3429 Cesar Bernardini and Felipe Andres Manzano reported an arbitrary offset dereference vulnerability in the libavcodec, in particular in the FLIC file format parser. A...

[SECURITY] [DSA 2165-1] ffmpeg-debian security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2165-1 [email protected] http://www.debian.org/security/ Luciano Bello February 16, 2011 http://www.debian.org/security/faq -...