Denial Of Service (DoS) Through CPU Consumption

FFmpeg is vulnerable to denial of service DoS attacks. The library lacks an end of fIle check, allowing a malicious user to pass a MOV file to the readtfra function in libavformat/mov.c to cause a loop that would consume large amounts of CPU and memory...

FFmpeg libavformat/mov.c File Denial of Service Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the libavformat/mov.c file in FFmpeg version 3.3.3, which is caused by the program's failure to adequately detect EOF End of File. The vulnerability can b...

CVE-2017-14222

In libavformat/mov.c in FFmpeg 3.3.3, a DoS in readtfra due to lack of an EOF End of File check might cause huge CPU and memory consumption. When a crafted MOV file, which claims a large "itemcount" field in the header but does not contain sufficient backing data, is provided, the loop would...

ALPINE-CVE-2017-14222

In libavformat/mov.c in FFmpeg 3.3.3, a DoS in readtfra due to lack of an EOF End of File check might cause huge CPU and memory consumption. When a crafted MOV file, which claims a large "itemcount" field in the header but does not contain sufficient backing data, is provided, the loop would...

DEBIAN-CVE-2017-14222

In libavformat/mov.c in FFmpeg 3.3.3, a DoS in readtfra due to lack of an EOF End of File check might cause huge CPU and memory consumption. When a crafted MOV file, which claims a large "itemcount" field in the header but does not contain sufficient backing data, is provided, the loop would...

CVE-2017-14222

In libavformat/mov.c in FFmpeg 3.3.3, a DoS in readtfra due to lack of an EOF End of File check might cause huge CPU and memory consumption. When a crafted MOV file, which claims a large "itemcount" field in the header but does not contain sufficient backing data, is provided, the loop would...

Design/Logic Flaw

In libavformat/mov.c in FFmpeg 3.3.3, a DoS in readtfra due to lack of an EOF End of File check might cause huge CPU and memory consumption. When a crafted MOV file, which claims a large "itemcount" field in the header but does not contain sufficient backing data, is provided, the loop would...

UBUNTU-CVE-2017-14222

In libavformat/mov.c in FFmpeg 3.3.3, a DoS in readtfra due to lack of an EOF End of File check might cause huge CPU and memory consumption. When a crafted MOV file, which claims a large "itemcount" field in the header but does not contain sufficient backing data, is provided, the loop would...

CVE-2017-14222

In libavformat/mov.c in FFmpeg 3.3.3, a DoS in readtfra due to lack of an EOF End of File check might cause huge CPU and memory consumption. When a crafted MOV file, which claims a large "itemcount" field in the header but does not contain sufficient backing data, is provided, the loop would...

CVE-2017-14222

In libavformat/mov.c in FFmpeg 3.3.3, a DoS in readtfra due to lack of an EOF End of File check might cause huge CPU and memory consumption. When a crafted MOV file, which claims a large "itemcount" field in the header but does not contain sufficient backing data, is provided, the loop would...

Easy MOV Converter Local Buffer Overflow Vulnerability

Ether Software Easy MOV Converte and others are different versions of DVD burning software. A local buffer overflow vulnerability exists in Easy MOV Converter. An attacker can exploit this vulnerability to cause a denial of service with a specially crafted username...

MP3 WAV to CD Burner 1.4.24 - Buffer Overflow (SEH) Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: MP3 WAV to CD Burner 1.4.24 - 'Enter User Name' Field Buffer Overflow SEH Date: 24-08-2017 Exploit Author: Anurag Srivastava Website: www.pyramidcyber.com Vulnerable Software: MP3 WAV to CD Burner Vendor...

MP3 WAV to CD Burner 1.4.24 - Local Buffer Overflow (SEH)

MP3 WAV to CD Burner 1.4.24 - Local Buffer Overflow SEH !/usr/bin/python Exploit Title: MP3 WAV to CD Burner 1.4.24 - 'Enter User Name' Field Buffer Overflow SEH Date: 24-08-2017 Exploit Author: Anurag Srivastava Website: www.pyramidcyber.com Vulnerable Software: MP3 WAV to CD Burner Vendor...

MP3 WAV to CD Burner 1.4.24 - Local Buffer Overflow (SEH)

!/usr/bin/python Exploit Title: MP3 WAV to CD Burner 1.4.24 - 'Enter User Name' Field Buffer Overflow SEH Date: 24-08-2017 Exploit Author: Anurag Srivastava Website: www.pyramidcyber.com Vulnerable Software: MP3 WAV to CD Burner Vendor Homepage: http://www.divxtodvd.net/ Version: 1.4.24 Software...

IrfanView .mov File Buffer Overflow Vulnerability

IrfanView is an image viewer that supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in IrfanView version 4.44 32b bit. A remote attacker can exploit this vulnerability to execute code with the help of specially crafted .mov files...

The vulnerability of the mov_build_index function in the FFmpeg multimedia library allows a hacker to cause unpredictable effects.

The vulnerability of the movbuildindex function in the FFmpeg multimedia library is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to exert unpredictable effects using vectors related to the sample size...

CVE-2017-8766

IrfanView version 4.44 32bit allows remote attackers to execute code via a crafted .mov file, because of a "User Mode Write AV near NULL" issue...

CVE-2017-8766

IrfanView version 4.44 32bit allows remote attackers to execute code via a crafted .mov file, because of a "User Mode Write AV near NULL" issue...

CVE-2017-8282

XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted .mov file that is mishandled during the opening of a directory in "Browser" mode, because of a "User Mode Write AV near NULL" in XnView.exe...

Design/Logic Flaw

XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted .mov file that is mishandled during the opening of a directory in "Browser" mode, because of a "User Mode Write AV near NULL" in XnView.exe...