[oCERT-2011-002] libavcodec insufficient boundary check

2011-002 libavcodec insufficient boundary check Description: The libavcodec library, an open source video encoding/decoding library part of the FFmpeg and Libav projects, performs insufficient boundary check against a buffer index. The missing check can result in arbitrary read/write of data...

libavcodec / FFmpeg / MPlayer buffer overflow

Buffer overflow in CAVS decoding...

NGS00068 Technical Advisory - LibAVCodec AMV Out of Array Write

======= Summary ======= Name: LibAVCodec AMV Out of Array Write Release Date: 31 July 2011 Reference: NGS00068 Discoverer: Dominic Chell [email protected] Vendor: VideoLAN Vendor Reference: CVE-2011-1931 Systems Affected: VLC media player 1.1.9 and earlier releases Risk: High Status:...

LibAVCodec / FFMpeg / VLC index array overflow

Index array overflow on AMV files parsing...

Mandriva Update for blender MDVSA-2011:114 (blender)

Check for the Version of blender OpenVAS Vulnerability Test Mandriva Update for blender MDVSA-2011:114 blender Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for blender MDVSA-2011:112 (blender)

Check for the Version of blender OpenVAS Vulnerability Test Mandriva Update for blender MDVSA-2011:112 blender Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Linux Security Advisory : blender (MDVSA-2011:112)

Multiple vulnerabilities have been identified and fixed in blender : oggparsevorbis.c in FFmpeg 0.5 does not properly perform certain pointer arithmetic, which might allow remote attackers to obtain sensitive memory contents and cause a denial of service via a crafted file that triggers an...

Mandriva Linux Security Advisory : blender (MDVSA-2011:114)

Multiple vulnerabilities have been identified and fixed in blender : oggparsevorbis.c in FFmpeg 0.5 does not properly perform certain pointer arithmetic, which might allow remote attackers to obtain sensitive memory contents and cause a denial of service via a crafted file that triggers an...

VLC Media Player 'AMV' Denial of Service Vulnerability (Linux)

The host is installed with VLC Media Player and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbvlcmediaplayeramvdosvulnlin.nasl 7044 2017-09-01 11:50:59Z teissa $ VLC Media Player 'AMV' Denial of Service Vulnerability Linux Authors: Madhuri D Copyright: Copyright c...

VLC Media Player 'AMV' Denial of Service Vulnerability - Windows

VLC Media Player is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2011-1931

CVE-2011-1931 is a vulnerability in FFmpeg’s AMV handling where sp5xdec.c in the Sunplus SP5X JPEG decoder (libavcodec/FFmpeg) writes outside the bounds of an unspecified array, enabling memory corruption and potentially remote code execution when processing malformed AMV files. The flaw affects ...

Mandriva Update for mplayer MDVSA-2011:089 (mplayer)

Check for the Version of mplayer OpenVAS Vulnerability Test Mandriva Update for mplayer MDVSA-2011:089 mplayer Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for ffmpeg MDVA-2011:020 (ffmpeg)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for mplayer MDVSA-2011:088 (mplayer)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Linux Security Advisory : mplayer (MDVSA-2011:089)

Multiple vulnerabilities have been identified and fixed in mplayer : FFmpeg 0.5 allows remote attackers to cause a denial of service hang via a crafted file that triggers an infinite loop. CVE-2009-4636 flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products,...

Mandriva Update for mplayer MDVSA-2011:088 (mplayer)

Check for the Version of mplayer OpenVAS Vulnerability Test Mandriva Update for mplayer MDVSA-2011:088 mplayer Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

NGS00068 Patch Notification: LibAVCodec AMV Out of Array Write

LibAVCodec AMV Out of Array Write 27/04/2011 Dominic Chell of NGS Secure has discovered a high risk vulnerability in LibAVCodec. Opening a malformed AMV file can result in an out of array write and potentially arbitrary code execution when using this library. Whilst the vulnerability may affect...

NGS00068 Patch Notification: LibAVCodec AMV Out of Array Write

LibAVCodec AMV Out of Array Write 27/04/2011 Dominic Chell of NGS Secure has discovered a high risk vulnerability in LibAVCodec. Opening a malformed AMV file can result in an out of array write and potentially arbitrary code execution when using this library. Whilst the vulnerability may affect...

NGS00068 Patch Notification: LibAVCodec AMV Out of Array Write

LibAVCodec AMV Out of Array Write 27/04/2011 Dominic Chell of NGS Secure has discovered a high risk vulnerability in LibAVCodec. Opening a malformed AMV file can result in an out of array write and potentially arbitrary code execution when using this library. Whilst the vulnerability may affect...

Mandriva Linux Security Advisory : ffmpeg (MDVSA-2011:060)

Multiple vulnerabilities has been identified and fixed in ffmpeg : oggparsevorbis.c in FFmpeg 0.5 does not properly perform certain pointer arithmetic, which might allow remote attackers to obtain sensitive memory contents and cause a denial of service via a crafted file that triggers an...