Lucene search
K

10 matches found

NVD
NVD
added 2015/06/16 4:59 p.m.15 views

CVE-2015-3395

The msrledecodepal4 function in msrledec.c in Libav before 10.7 and 11.x before 11.4 and FFmpeg before 2.0.7, 2.2.x before 2.2.15, 2.4.x before 2.4.8, 2.5.x before 2.5.6, and 2.6.x before 2.6.2 allows remote attackers to have unspecified impact via a crafted image, related to a pixel pointer, whi...

6.8CVSS8.7AI score0.01049EPSS
Exploits0References8
OSV
OSV
added 2015/06/16 4:59 p.m.1 views

DEBIAN-CVE-2015-3395

The msrledecodepal4 function in msrledec.c in Libav before 10.7 and 11.x before 11.4 and FFmpeg before 2.0.7, 2.2.x before 2.2.15, 2.4.x before 2.4.8, 2.5.x before 2.5.6, and 2.6.x before 2.6.2 allows remote attackers to have unspecified impact via a crafted image, related to a pixel pointer, whi...

6.8CVSS7.3AI score0.01049EPSS
Exploits0References1
Prion
Prion
added 2015/06/16 4:59 p.m.23 views

Out-of-bounds

The msrledecodepal4 function in msrledec.c in Libav before 10.7 and 11.x before 11.4 and FFmpeg before 2.0.7, 2.2.x before 2.2.15, 2.4.x before 2.4.8, 2.5.x before 2.5.6, and 2.6.x before 2.6.2 allows remote attackers to have unspecified impact via a crafted image, related to a pixel pointer, whi...

6.8CVSS7.2AI score0.01049EPSS
Exploits0References8Affected Software3
Debian CVE
Debian CVE
added 2015/06/16 4:0 p.m.34 views

CVE-2015-3395

The msrledecodepal4 function in msrledec.c in Libav before 10.7 and 11.x before 11.4 and FFmpeg before 2.0.7, 2.2.x before 2.2.15, 2.4.x before 2.4.8, 2.5.x before 2.5.6, and 2.6.x before 2.6.2 allows remote attackers to have unspecified impact via a crafted image, related to a pixel pointer, whi...

6.8CVSS8.8AI score0.01049EPSS
Exploits0
CVE
CVE
added 2015/06/16 4:0 p.m.87 views

CVE-2015-3395

CVE-2015-3395 affects Libav/FFmpeg through the msrle_decode_pal4 path in msrledec.c, where a crafted image can trigger an out-of-bounds array access. Affected releases include Libav before 10.7 and FFmpeg before 2.0.7, plus FFmpeg branches 2.2.x before 2.2.15, 2.4.x before 2.4.8, 2.5.x before 2.5...

6.8CVSS8.5AI score0.01049EPSS
Exploits0References8Affected Software1
Cvelist
Cvelist
added 2015/06/16 4:0 p.m.22 views

CVE-2015-3395

The msrledecodepal4 function in msrledec.c in Libav before 10.7 and 11.x before 11.4 and FFmpeg before 2.0.7, 2.2.x before 2.2.15, 2.4.x before 2.4.8, 2.5.x before 2.5.6, and 2.6.x before 2.6.2 allows remote attackers to have unspecified impact via a crafted image, related to a pixel pointer, whi...

8.7AI score0.01049EPSS
Exploits0References8
UbuntuCve
UbuntuCve
added 2015/06/16 12:0 a.m.36 views

CVE-2015-3395

The msrledecodepal4 function in msrledec.c in Libav before 10.7 and 11.x before 11.4 and FFmpeg before 2.0.7, 2.2.x before 2.2.15, 2.4.x before 2.4.8, 2.5.x before 2.5.6, and 2.6.x before 2.6.2 allows remote attackers to have unspecified impact via a crafted image, related to a pixel pointer, whi...

6.8CVSS7.3AI score0.01049EPSS
Exploits0References3
OSV
OSV
added 2015/06/16 12:0 a.m.0 views

UBUNTU-CVE-2015-3395

The msrledecodepal4 function in msrledec.c in Libav before 10.7 and 11.x before 11.4 and FFmpeg before 2.0.7, 2.2.x before 2.2.15, 2.4.x before 2.4.8, 2.5.x before 2.5.6, and 2.6.x before 2.6.2 allows remote attackers to have unspecified impact via a crafted image, related to a pixel pointer, whi...

6.8CVSS7.4AI score0.01049EPSS
Exploits0References4
CNVD
CNVD
added 2015/04/29 12:0 a.m.1 views

FFmpeg 'msrle_decode_pal4' Denial of Service Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg versions prior to 2.5.6 and 2.6.2, which originates from an error in the 'msrledecodepal4' function in the libavcodec/msrledec.c file. An attacker...

6.8CVSS6.7AI score0.01049EPSS
Exploits0References1
FreeBSD
FreeBSD
added 2015/04/12 12:0 a.m.33 views

ffmpeg -- out-of-bounds array access

NVD reports: The msrledecodepal4 function in msrledec.c in Libav before 10.7 and 11.x before 11.4 and FFmpeg before 2.0.7, 2.2.x before 2.2.15, 2.4.x before 2.4.8, 2.5.x before 2.5.6, and 2.6.x before 2.6.2 allows remote attackers to have unspecified impact via a crafted image, related to a pixel...

6.8CVSS8.4AI score0.01049EPSS
Exploits0References4
Rows per page
Query Builder