CVE-2008-4866

CVE-2008-4866 concerns FFmpeg 0.4.9 (before r14715) via libavformat/utils.c, where multiple buffer overflows could be triggered in the DTS generation path if a delay exceeds MAX_REORDER_DELAY. The FFmpeg component is used by MPlayer, so a context-dependent attacker could potentially execute arbit...

CVE-2008-4866

Multiple buffer overflows in libavformat/utils.c in FFmpeg 0.4.9 before r14715, as used by MPlayer, allow context-dependent attackers to have an unknown impact via vectors related to execution of DTS generation code with a delay greater than MAXREORDERDELAY...

FFmpeg libavformat 'psxstr.c' STR数据堆缓冲区溢出漏洞

BUGTRAQ ID: 30154 CNCAN ID：CNCAN-2008071004 FFmpeg是一款用于录制、转换和流化音频和视频的解决方案。 FFmpeg psxstr.c:319处理STR数据存在堆溢出问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 由于在解析STR数据时，拷贝过程中缺少充分的边界检查，可导致触发基于堆的溢出。攻击者可以构建特殊的STR文件，诱使用户访问来触发。 FFmpeg FFmpeg CVS + Ubuntu Ubuntu Linux 5.0 4 powerpc + Ubuntu Ubuntu Linux 5.0 4 i386 + Ubuntu...

FFmpeg libavformat - psxstr.c STR Data Heap Buffer Overflow

FFmpeg libavformat - psxstr.c STR Data Heap Buffer Overflow source: https://www.securityfocus.com/bid/30154/info The 'libavformat' library from FFmpeg is prone to a remote heap-based buffer-overflow vulnerability because of insufficient boundary checks when parsing STR data. Remote attackers can...

FFmpeg libavformat - 'psxstr.c' STR Data Heap Buffer Overflow

source: https://www.securityfocus.com/bid/30154/info The 'libavformat' library from FFmpeg is prone to a remote heap-based buffer-overflow vulnerability because of insufficient boundary checks when parsing STR data. Remote attackers can exploit this issue by enticing victims into opening...

mplayer -- vulnerability in STR files processor

Secunia reports: The vulnerability is caused due to a boundary error within the "strreadpacket" function in libavformat/psxstr.c. This can be exploited to cause a heap-based buffer overflow via a specially crafted STR file...

Debian Security Advisory DSA 992-1 (ffmpeg)

The remote host is missing an update to ffmpeg announced via advisory DSA 992-1. Simon Kilvington discovered that specially crafted PNG images can trigger a heap overflow in libavcodec, the multimedia library of ffmpeg, which may lead to the execution of arbitrary code. The old stable distributio...