[SECURITY] [DSA 2165-1] ffmpeg-debian security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2165-1 [email protected] http://www.debian.org/security/ Luciano Bello February 16, 2011 http://www.debian.org/security/faq -...

DSA-2165-1 ffmpeg-debian - buffer overflow

Bulletin has no description...

CVE-2010-4704

libavcodec/vorbisdec.c in the Vorbis decoder in FFmpeg 0.6.1 and earlier allows remote attackers to cause a denial of service application crash via a crafted .ogg file, related to the vorbisfloor0decode function. NOTE: this might overlap CVE-2011-0480...

Integer overflow

Integer overflow in the vorbisresiduedecodeinternal function in libavcodec/vorbisdec.c in the Vorbis decoder in FFmpeg, possibly 0.6, has unspecified impact and remote attack vectors, related to the sizes of certain integer data types. NOTE: this might overlap CVE-2011-0480...

CVE-2010-4704

CVE-2010-4704 affects FFmpeg prior to 0.6.1, specifically the Vorbis decoder (libavcodec/vorbis_dec.c). A crafted .ogg file can trigger a denial-of-service (application crash) due to issues in vorbis_floor0_decode. Exploitation is remote and requires no user interaction. The issue is documented a...

CVE-2010-4704

libavcodec/vorbisdec.c in the Vorbis decoder in FFmpeg 0.6.1 and earlier allows remote attackers to cause a denial of service application crash via a crafted .ogg file, related to the vorbisfloor0decode function. NOTE: this might overlap CVE-2011-0480...

DEBIAN-CVE-2010-3429

flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a crafted flic file, related to an "arbitrary offset dereference vulnerability."...

CVE-2010-3429

flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a crafted flic file, related to an "arbitrary offset dereference vulnerability."...

Design/Logic Flaw

flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a crafted flic file, related to an "arbitrary offset dereference vulnerability."...

CVE-2010-3429

flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a crafted flic file, related to an "arbitrary offset dereference vulnerability."...

CVE-2010-3429

CVE-2010-3429 affects FFmpeg’s libavcodec (0.6 and earlier) used by MPlayer and other apps. The flaw resides in flic file processing, enabling remote code execution via a crafted flic, related to an arbitrary offset dereference. Public advisories (GLSA 2013-10-12/13 and related OpenVAS entries) g...

CVE-2010-3429

flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a crafted flic file, related to an "arbitrary offset dereference vulnerability."...

CVE-2010-3429

flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a crafted flic file, related to an "arbitrary offset dereference vulnerability."...

FFmpeg libavcodec / MPlayer buffer overflow

Buffer overflow on flic format parsing...

[oCERT-2010-004] FFmpeg/libavcodec arbitrary offset dereference

2010-004 FFmpeg/libavcodec arbitrary offset dereference Description: The libavcodec library, an open source video encoding/decoding library part of the FFmpeg project, suffers from an arbitrary offset dereference vulnerability. The vulnerability affects the flic file format parser, insufficient...

CVE-2008-4867

Buffer overflow in libavcodec/dca.c in FFmpeg 0.4.9 before r14917, as used by MPlayer, allows context-dependent attackers to have an unknown impact via vectors related to an incorrect DCAMAXFRAMESIZE value...

Buffer overflow

Buffer overflow in libavcodec/dca.c in FFmpeg 0.4.9 before r14917, as used by MPlayer, allows context-dependent attackers to have an unknown impact via vectors related to an incorrect DCAMAXFRAMESIZE value...

CVE-2008-4868

Unspecified vulnerability in the avcodecclose function in libavcodec/utils.c in FFmpeg 0.4.9 before r14787, as used by MPlayer, has unknown impact and attack vectors, related to a free "on random pointers."...

CVE-2008-4867

CVE-2008-4867 affects FFmpeg (FFmpeg 0.4.9 before r14917) with a buffer overflow in libavcodec/dca.c, used by MPlayer. Root cause: incorrect DCA_MAX_FRAME_SIZE value as described in the CVE entry, enabling a context-dependent attacker to potentially compromise via crafted DCA files. The vulnerabi...

CVE-2008-4868

CVE-2008-4868 concerns an unspecified vulnerability in the function avcodec_close() within libavcodec/utils.c of FFmpeg 0.4.9 before r14787 , used by MPlayer . The connected sources consistently describe the issue as having an unknown impact and attack vectors; no concrete exploit details are pro...