CVE-2008-4866

CVE-2008-4866 concerns FFmpeg 0.4.9 (before r14715) via libavformat/utils.c, where multiple buffer overflows could be triggered in the DTS generation path if a delay exceeds MAX_REORDER_DELAY. The FFmpeg component is used by MPlayer, so a context-dependent attacker could potentially execute arbit...

CVE-2008-4869

Summary: CVE-2008-4869 affects FFmpeg 0.4.9 as used by MPlayer. The vulnerability is a context-dependent memory leak that can be exploited to cause a denial of service via memory consumption. The connected advisories confirm FFmpeg-related issues in 2008/2009 timelines, with multiple sources (Man...

CVE-2008-4867

Buffer overflow in libavcodec/dca.c in FFmpeg 0.4.9 before r14917, as used by MPlayer, allows context-dependent attackers to have an unknown impact via vectors related to an incorrect DCAMAXFRAMESIZE value...

CVE-2008-4867

Buffer overflow in libavcodec/dca.c in FFmpeg 0.4.9 before r14917, as used by MPlayer, allows context-dependent attackers to have an unknown impact via vectors related to an incorrect DCAMAXFRAMESIZE value...

CVE-2008-4869

FFmpeg 0.4.9, as used by MPlayer, allows context-dependent attackers to cause a denial of service memory consumption via unknown vectors, aka a "Tcp/udp memory leak."...

CVE-2008-4867

Buffer overflow in libavcodec/dca.c in FFmpeg 0.4.9 before r14917, as used by MPlayer, allows context-dependent attackers to have an unknown impact via vectors related to an incorrect DCAMAXFRAMESIZE value...

CVE-2008-4866

Multiple buffer overflows in libavformat/utils.c in FFmpeg 0.4.9 before r14715, as used by MPlayer, allow context-dependent attackers to have an unknown impact via vectors related to execution of DTS generation code with a delay greater than MAXREORDERDELAY...

CVE-2008-4867: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in libavcodec/dca.c in FFmpeg 0.4.9 before r14917, as used by MPlayer, allows context-dependent attackers to have an unknown impact via vectors related to an incorrect DCAMAXFRAMESIZE value...

CVE-2008-4866: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in libavformat/utils.c in FFmpeg 0.4.9 before r14715, as used by MPlayer, allow context-dependent attackers to have an unknown impact via vectors related to execution of DTS generation code with a delay greater than MAXREORDERDELAY...

CVE-2008-4868: Undefined Security Weakness

Unspecified vulnerability in the avcodecclose function in libavcodec/utils.c in FFmpeg 0.4.9 before r14787, as used by MPlayer, has unknown impact and attack vectors, related to a free "on random pointers."...

CVE-2008-4869: Undefined Security Weakness

FFmpeg 0.4.9, as used by MPlayer, allows context-dependent attackers to cause a denial of service memory consumption via unknown vectors, aka a "Tcp/udp memory leak."...

CVE-2008-4610

MPlayer allows remote attackers to cause a denial of service application crash via 1 a malformed AAC file, as demonstrated by lol-vlc.aac; or 2 a malformed Ogg Media OGM file, as demonstrated by lol-ffplay.ogm, different vectors than CVE-2007-6718...

Gentoo Security Advisory GLSA 200602-01 (gst-plugins-ffmpeg)

The remote host is missing updates announced in advisory GLSA 200602-01. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200603-03 (MPlayer)

The remote host is missing updates announced in advisory GLSA 200603-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200602-01 (gst-plugins-ffmpeg)

The remote host is missing updates announced in advisory GLSA 200602-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200609-09 (ffmpeg)

The remote host is missing updates announced in advisory GLSA 200609-09. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200601-06 (xine-lib ffmpeg)

The remote host is missing updates announced in advisory GLSA 200601-06. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200603-03 (MPlayer)

The remote host is missing updates announced in advisory GLSA 200603-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200609-09 (ffmpeg)

The remote host is missing updates announced in advisory GLSA 200609-09. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200601-06 (xine-lib ffmpeg)

The remote host is missing updates announced in advisory GLSA 200601-06. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...