CVE-2012-0855

Heap-based buffer overflow in the getsot function in the J2K decoder j2k.c in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service application crash via unspecified vectors related to the curtileno variable...

CVE-2012-0855

Heap-based buffer overflow in the getsot function in the J2K decoder j2k.c in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service application crash via unspecified vectors related to the curtileno variable...

CVE-2012-0849: Undefined Security Weakness

Integer overflow in the ffj2kdwtinit function in libavcodec/j2kdwt.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service segmentation fault and application crash via a crafted JPEG2000 image that triggers an incorrect check for a negative value...

CVE-2012-0855: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the getsot function in the J2K decoder j2k.c in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service application crash via unspecified vectors related to the curtileno variable...

PT-2012-2911

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.9.1 Description The issue is related to a heap-based buffer overflow in the get sot function within the J2K decoder j2k.c in libavcodec. This can be exploited by remote attackers to cause a denial of service,...

Integer overflow

Integer overflow in the vp3dequant function in the VP3 decoder vp3.c in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of...

Buffer overflow

Buffer overflow in the Sierra VMD decoder in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9 and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of service crash and possibly...

CVE-2011-3945

The decodeframe function in the KVG1 decoder kgv1dec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service crash and possibly...

CVE-2011-4352

Integer overflow in the vp3dequant function in the VP3 decoder vp3.c in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of...

CVE-2011-3945

CVE-2011-3945 affects FFmpeg/Libav: the decode_frame function in the KVG1 decoder (kgv1dec.c) in libavcodec vulnerable to crafted media files, enabling remote DoS and possibly code execution. Affected, per description: FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11; Libav 0.5.x before 0.5.9, ...

CVE-2011-4364

Buffer overflow in the Sierra VMD decoder in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9 and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of service crash and possibly...

CVE-2011-4579

The svq1decodeframe function in the SVQ1 decoder svq1dec.c in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of service...

CVE-2011-4579

The CVE-2011-4579 entry concerns the SVQ1 decoder function svq1_decode_frame in FFmpeg/libavcodec (svq1dec.c). A crafted SVQ1 stream can trigger a memory corruption vulnerability that allows remote denial of service, with impact described as a crash via a stream whose dimensions change. Affected ...

CVE-2011-4352

Integer overflow in the vp3dequant function in the VP3 decoder vp3.c in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of...

CVE-2012-0857

FFmpeg before 0.9.1 is affected by CVE-2012-0857 due to multiple buffer overflows in the get_qcx function (j2kdec.c) of the libavcodec library, enabling remote attackers to cause an application crash (denial of service). The vulnerability is triggered by unspecified vectors. The provided document...

CVE-2012-0854

The vulnerability CVE-2012-0854 affects FFmpeg’s libavcodec/dpcm.c (dpcm_decode_frame) in versions before 0.9.1. The issue arises from using an improper pointer after an audio API change, enabling remote attackers to trigger a denial of service (application crash) through a heap-based buffer over...

CVE-2012-0848

Heap-based buffer overflow in the wssnddecodeframe function in libavcodec/ws-snd1.c in FFmpeg 0.9.1 allows remote attackers to cause a denial of service application crash via a crafted media file, related to an incorrect calculation, aka "wrong samples count."...

CVE-2012-0850

The sbrqmfsynthesis function in libavcodec/aacsbr.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service application crash via a crafted mpg file that triggers memory corruption involving the voff variable, probably a buffer underflow...

CVE-2012-0856

Heap-based buffer overflow in the MPVframestart function in libavcodec/mpegvideo.c in FFmpeg before 0.9.1, when the lowres option is enabled, allows remote attackers to cause a denial of service application crash via a crafted H263 media file. NOTE: this vulnerability exists because of a regressi...

CVE-2012-0850

The CVE-2012-0850 entry is supported by concrete details across connected sources: FFmpeg/libavcodec in FFmpeg before 0.9.1 contains a flaw in sbr_qmf_synthesis (libavcodec/aacsbr.c) that can trigger memory corruption via crafted MPEGs, likely a buffer underflow, leading to application crashes an...