5 matches found
SUSE CVE-2015-8216
The ljpegdecodeyuvscan function in libavcodec/mjpegdec.c in FFmpeg before 2.8.2 omits certain width and height checks, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted MJPEG data...
PT-2015-7371
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.7.2 Description The issue is related to multiple integer underflows in the ff mjpeg decode frame function, which can be exploited by remote attackers using crafted MJPEG data. This can lead to a denial of service due...
PT-2015-2777
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.5.4 Description The issue is related to the ff mjpeg decode sof function in libavcodec/mjpegdec.c, which does not validate the number of components in a JPEG-LS Start Of Frame segment. This allows remote attackers to...
PT-2014-8931
Name of the Vulnerable Software and Affected Versions FFMpeg versions prior to 2.1.6 FFMpeg versions 2.2.x through 2.3.x FFMpeg versions 2.4.x prior to 2.4.4 Description The issue allows remote attackers to cause a denial of service and possibly have other unspecified impact via vectors related t...
PT-2013-1094
Name of the Vulnerable Software and Affected Versions libav versions prior to the fixed version Description The issue concerns multiple vulnerabilities in the libav package of the Debian GNU/Linux operating system, which can be exploited remotely to compromise the confidentiality, integrity, and...