CVE-2014-8542: Improper Restriction of Operations within the Bounds of a Memory Buffer

libavcodec/utils.c in FFmpeg before 2.4.2 omits a certain codec ID during enforcement of alignment, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via crafted JV data...

CVE-2014-8545: Undefined Security Weakness

libavcodec/pngdec.c in FFmpeg before 2.4.2 accepts the monochrome-black format without verifying that the bits-per-pixel value is 1, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via crafted PNG data...

PT-2014-8608

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.4.2 Description The issue is related to an integer underflow in the libavcodec/cinepak.c module, which can be triggered by crafted Cinepak video data. This can lead to a denial of service due to out-of-bounds access ...

CVE-2014-8549: Undefined Security Weakness

libavcodec/on2avc.c in FFmpeg before 2.4.2 does not constrain the number of channels to at most 2, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via crafted On2 data...

CVE-2014-8548

Off-by-one error in libavcodec/smc.c in FFmpeg before 2.4.2 allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via crafted Quicktime Graphics aka SMC video data...

CVE-2014-8543: Improper Input Validation

libavcodec/mmvideo.c in FFmpeg before 2.4.2 does not consider all lines of HHV Intra blocks during validation of image height, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via crafted MM video data...

PT-2014-8611

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.4.2 Description The issue is related to the handling of On2 data in the libavcodec/on2avc.c file. It does not properly constrain the number of channels, which can lead to out-of-bounds access. This can cause a denial...

PT-2014-8604

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.4.2 Description The issue is related to the libavcodec/utils.c file in FFmpeg, where a certain codec ID is not properly enforced during alignment, allowing remote attackers to cause a denial of service out-of-bounds...

PT-2014-8603

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.4.2 Description The issue allows remote attackers to cause a denial of service or possibly have other impacts via crafted MJPEG data. This is due to the consideration of only dimension differences, and not...

CVE-2014-5272

libavcodec/iff.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.2.x before 2.2.7, and 2.3.x before 2.3.2 allows remote attackers to have unspecified impact via a crafted iff image, which triggers an out-of-bounds array access, related to the rgb8 and rgbn formats...

CVE-2014-5271

Heap-based buffer overflow in the encodeslice function in libavcodec/proresenckostya.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.x before 2.2.7, and 2.3.x before 2.3.3 and Libav before 10.5 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via...

Heap overflow

Heap-based buffer overflow in the encodeslice function in libavcodec/proresenckostya.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.x before 2.2.7, and 2.3.x before 2.3.3 and Libav before 10.5 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via...

UBUNTU-CVE-2014-5271

Heap-based buffer overflow in the encodeslice function in libavcodec/proresenckostya.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.x before 2.2.7, and 2.3.x before 2.3.3 and Libav before 10.5 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via...

CVE-2014-5272

CVE-2014-5272 affects FFmpeg’s libavcodec/iff.c where a crafted IF image can trigger an out-of-bounds array access in rgb8/rgbn handling. Affected versions include FFmpeg before 1.1.14, 1.2.x before 1.2.8, 2.2.x before 2.2.7, and 2.3.x before 2.3.2. The provided connected sources corroborate the ...

CVE-2014-5271

Heap-based buffer overflow in the encodeslice function in libavcodec/proresenckostya.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.x before 2.2.7, and 2.3.x before 2.3.3 and Libav before 10.5 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via...

CVE-2014-5272

libavcodec/iff.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.2.x before 2.2.7, and 2.3.x before 2.3.2 allows remote attackers to have unspecified impact via a crafted iff image, which triggers an out-of-bounds array access, related to the rgb8 and rgbn formats...

CVE-2014-5271

Heap-based buffer overflow in the encodeslice function in libavcodec/proresenckostya.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.x before 2.2.7, and 2.3.x before 2.3.3 and Libav before 10.5 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via...

PT-2014-6383

Name of the Vulnerable Software and Affected Versions FFMpeg versions prior to 1.1.14 FFMpeg versions 1.2.x prior to 1.2.8 FFMpeg versions 2.x prior to 2.2.7 FFMpeg versions 2.3.x prior to 2.3.3 Libav versions prior to 10.5 Description A heap-based buffer overflow issue exists in the encode slice...

CVE-2014-5272: Improper Restriction of Operations within the Bounds of a Memory Buffer

libavcodec/iff.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.2.x before 2.2.7, and 2.3.x before 2.3.2 allows remote attackers to have unspecified impact via a crafted iff image, which triggers an out-of-bounds array access, related to the rgb8 and rgbn formats...

Mandriva Linux Security Advisory : ffmpeg (MDVSA-2014:129)

Multiple vulnerabilities has been discovered and corrected in ffmpeg : Multiple unspecified vulnerabilities in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 have unknown impact and attack vectors related to 1 size of mclms arrays, 2 a getbits0 in decodeacfilter, and 3 too many bits in...