CVE-2016-7499

The sbrmakefmaster function in aacsbr.c in Libav 11.7 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mp3 file...

CVE-2016-8675

The getvlc2 function in getbits.h in Libav before 11.9 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted mp3 file, possibly related to startcode sequences during m4v detection...

CVE-2016-8676

CVE-2016-8676 affects Libav 11.9: the get_vlc2 function in get_bits.h can be triggered by a crafted MP3 to cause a denial-of-service via a NULL pointer dereference leading to a crash. This vulnerability is described as stemming from an incomplete fix for CVE-2016-8675. The connected documents con...

CVE-2016-7477

The ffputpixels8xy2mmx function in rndtemplate.c in Libav 11.7 allows remote attackers to cause a denial of service invalid memory access and crash via a crafted mp3 file. NOTE: this issue was originally reported as involving a NULL pointer dereference...

CVE-2016-8676

The getvlc2 function in getbits.h in Libav 11.9 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted mp3 file. NOTE: this issue exists due to an incomplete fix for CVE-2016-8675...

Out-of-bounds

The avcodecdecodeaudio4 function in libavcodec in libavformat 57.34.103, as used in MPlayer, allows remote attackers to cause a denial of service out-of-bounds read via a crafted mp3 file...

CVE-2016-5115

The avcodecdecodeaudio4 function in libavcodec in libavformat 57.34.103, as used in MPlayer, allows remote attackers to cause a denial of service out-of-bounds read via a crafted mp3 file...

CVE-2016-5115

The avcodecdecodeaudio4 function in libavcodec in libavformat 57.34.103, as used in MPlayer, allows remote attackers to cause a denial of service out-of-bounds read via a crafted mp3 file...

CVE-2016-5115

The avcodecdecodeaudio4 function in libavcodec in libavformat 57.34.103, as used in MPlayer, allows remote attackers to cause a denial of service out-of-bounds read via a crafted mp3 file...

CVE-2016-5115

CVE-2016-5115 affects libavcodec/libavformat (used by MPlayer): the avcodec_decode_audio4 function can be triggered by a crafted MP3 file to cause an out-of-bounds read, resulting in a denial of service. The connected documents confirm the component, vulnerability mechanism, and impact; no explic...

Debian DLA-791-1 : libav security update

Multiple integer overflows have been discovered in libav 11.8 and earlier, allowing remote attackers to cause a crash via a crafted MP3 file. For Debian 7 'Wheezy', these problems have been fixed in version 6:0.8.20-0+deb7u1. We recommend that you upgrade your libav packages. NOTE: Tenable Networ...

Ubuntu system actually exists Nintendo red and white game machine vulnerability-vulnerability warning-the black bar safety net

Recently security researchers Evans in the Ubuntu system found a very interesting vulnerability, this vulnerability also with Nintendo the year of the 8-bit consoles（NES, or FC. Evans said that in Ubuntu 12.04.5 version of the multimedia framework in the presence of a vulnerability, the...

CVE-2016-7424

The putnorndpixels8xy2mmx function in x86/rndtemplate.c in libav 11.7 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted MP3 file...

CVE-2016-7424

The putnorndpixels8xy2mmx function in x86/rndtemplate.c in libav 11.7 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted MP3 file...

Null pointer dereference

The putnorndpixels8xy2mmx function in x86/rndtemplate.c in libav 11.7 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted MP3 file...

CVE-2016-7424

The putnorndpixels8xy2mmx function in x86/rndtemplate.c in libav 11.7 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted MP3 file...

CVE-2016-7424

CVE-2016-7424 affects libav 11.7 and earlier, in the x86/rnd_template.c function put_no_rnd_pixels8_xy2_mmx. The vulnerability allows remote attackers to trigger a denial of service via a crafted MP3 file, causing a NULL pointer dereference and crash. Connected advisories confirm this issue withi...

CVE-2016-7424

The putnorndpixels8xy2mmx function in x86/rndtemplate.c in libav 11.7 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted MP3 file...

Updated vlc/mad packages fix security vulnerability

A vulnerability was found in processing QuickTime IMA files. VLC does not check that the number of channels in the input stream is less than or equal to the size of the buffer, resulting in an out-of-bounds write potential for remote code execution via a malicious media file CVE-2016-5108. The vl...

MediaInfo 0.7.61 - Crash (PoC)

Exploit for windows platform in category dos / poc !/usr/bin/perl -w Title : Windows Media Player MediaInfo v0.7.61 - Buffer Overflow Exploit Tested on Windows 7 / Server 2008 Download Link : https://sourceforge.net/projects/mediainfo/files/binary/mediainfo-gui/0.7.61/ Author : Mohammad Reza...