USN-2534-1: Libav vulnerabilities

It was discovered that Libav incorrectly handled certain malformed media files. If a user were tricked into opening a crafted media file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program...

Debian DSA-3189-1 : libav - security update

Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. A full list of the changes is available at %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

[SECURITY] [DSA 3189-1] libav security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3189-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 15, 2015 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 3189-1 (libav - security update)

Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. A full list of the changes is available at http://git.libav.org/?p=libav.git;a=blob;f=Changelog;hb=refs/tags/v0.8.17 OpenVAS Vulnerability Test $Id: deb3189.nasl 6609 2017-07-07 12:05:59...

DSA-3189-1 libav - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3189-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-201502-08 : Libav: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201502-08 Libav: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Libav. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open a specially...

Libav: Multiple vulnerabilities

Background Libav is a complete solution to record, convert and stream audio and video. Description Multiple vulnerabilities have been discovered in Libav. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to open a specially crafted media...

FFmpeg and Libav 'libavcodec/xface.h' Denial of Service Vulnerability

FFmpeg is a free program that performs recording, transferring and streaming of audio and video in various formats. FFmpeg versions prior to 2.5.2 libavcodec/xface.h establishes certain numeric and word array dimensions that do not conform to the required mathematical relationships, which can be...

CVE-2014-9598

The pictureRelease function in misc/picture.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service write access violation via a crafted M2V file...

EUVD-2014-5164

Heap-based buffer overflow in the encodeslice function in libavcodec/proresenckostya.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.x before 2.2.7, and 2.3.x before 2.3.3 and Libav before 10.5 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via...

CVE-2014-5271

The vulnerability CVE-2014-5271 (and related CVEs like CVE-2014-5272) is a heap-based buffer overflow in FFmpeg’s encode_slice (libavcodec/proresenc_kostya.c). Affected are FFmpeg builds before 1.1.14, 1.2.x before 1.2.8, 2.x before 2.2.7, and 2.3.x before 2.3.3, as well as Libav before 10.5. Thi...

PT-2014-6383

Name of the Vulnerable Software and Affected Versions FFMpeg versions prior to 1.1.14 FFMpeg versions 1.2.x prior to 1.2.8 FFMpeg versions 2.x prior to 2.2.7 FFMpeg versions 2.3.x prior to 2.3.3 Libav versions prior to 10.5 Description A heap-based buffer overflow issue exists in the encode slice...

CVE-2014-5271: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the encodeslice function in libavcodec/proresenckostya.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.x before 2.2.7, and 2.3.x before 2.3.3 and Libav before 10.5 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via...

libav / ffmpeg memory corruption

Memory corruption on FFV1 decoding...

[SECURITY] [DSA 3027-1] libav security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3027-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 17, 2014 http://www.debian.org/security/faq -...

Debian DSA-3027-1 : libav - security update

Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. A full list of the changes is available at http://git.libav.org/?p=libav.git;a=blob;f=Changelog;hb=refs/tags/v0.8 .15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

Ubuntu: Security Advisory (USN-2349-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 12.04 LTS : libav vulnerabilities (USN-2349-1)

It was discovered that Libav incorrectly handled certain malformed media files. If a user were tricked into opening a crafted media file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Not...

[SECURITY] [DSA 3027-1] libav security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3027-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 17, 2014 http://www.debian.org/security/faq -...