EUVD-2017-8121

Malware in sbrugna...

EUVD-2011-3893

Malware in sbrugna...

EUVD-2017-5681

Malware in sbrugna...

CVE-2017-16952

KMPlayer 4.2.2.4 allows remote attackers to cause a denial of service via a crafted NSV file...

Code injection

KMPlayer 4.2.2.4 allows remote attackers to cause a denial of service via a crafted NSV file...

CVE-2017-16952

KMPlayer 4.2.2.4 allows remote attackers to cause a denial of service via a crafted NSV file...

CVE-2017-16952

KMPlayer 4.2.2.4 is affected by a denial-of-service vulnerability triggered by a crafted NSV file. Publicly available references (NVD, CNVD, CVE list) describe remote DoS via NSV payload; exploitation examples exist (Exploit-DB, Exploit-Pack). No remediation or fixed version is provided in the su...

CVE-2017-16952

KMPlayer 4.2.2.4 allows remote attackers to cause a denial of service via a crafted NSV file...

CVE-2017-16952: Improper Input Validation

KMPlayer 4.2.2.4 allows remote attackers to cause a denial of service via a crafted NSV file...

PT-2017-14655

Name of the Vulnerable Software and Affected Versions KMPlayer version 4.2.2.4 Description The issue allows remote attackers to cause a denial of service via a crafted NSV file. Recommendations For KMPlayer version 4.2.2.4, update to a newer version that contains a fix for this issue...

CVE-2017-14171

In libavformat/nsvdec.c in FFmpeg 2.4 and 3.3.3, a DoS in nsvparseNSVfheader due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted NSV file, which claims a large "tableentriesused" field in the header but does not contain sufficient backing data, is provided, th...

CVE-2017-14171

In libavformat/nsvdec.c in FFmpeg 2.4 and 3.3.3, a DoS in nsvparseNSVfheader due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted NSV file, which claims a large "tableentriesused" field in the header but does not contain sufficient backing data, is provided, th...

CVE-2017-14171

CVE-2017-14171 is a denial-of-service in FFmpeg’s NSV header parsing (libavformat/nsvdec.c) caused by a missing EOF check in nsv_parse_NSVf_header(). A crafted NSV file misreports table_entries_used in the header but lacks backing data, causing the loop over table_entries_used to consume excessiv...

CVE-2017-14171

In libavformat/nsvdec.c in FFmpeg 2.4 and 3.3.3, a DoS in nsvparseNSVfheader due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted NSV file, which claims a large "tableentriesused" field in the header but does not contain sufficient backing data, is provided, th...

CVE-2017-14171: Excessive Iteration

In libavformat/nsvdec.c in FFmpeg 2.4 and 3.3.3, a DoS in nsvparseNSVfheader due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted NSV file, which claims a large "tableentriesused" field in the header but does not contain sufficient backing data, is provided, th...

PT-2017-2813

Name of the Vulnerable Software and Affected Versions FFmpeg versions 2.4 through 3.3.3 Description The issue is related to the nsv parse NSVf header function in the libavformat/nsvdec.c file of the FFmpeg multimedia library. It is associated with resource management errors. Exploitation of this...

CVE-2011-3940

nsvdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service out-of-bounds read and write via a crafted NSV file that triggers "us...

DEBIAN-CVE-2011-3940

nsvdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service out-of-bounds read and write via a crafted NSV file that triggers "us...

Out-of-bounds

nsvdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service out-of-bounds read and write via a crafted NSV file that triggers "us...

CVE-2011-3940

CVE-2011-3940 affects FFmpeg and Libav packages where nsvdec.c in libavcodec could trigger an out-of-bounds read/write via a crafted NSV file, leading to a denial of service. Versions impacted include FFmpeg 0.7.x before 0.7.12, FFmpeg 0.8.x before 0.8.11, Libav 0.5.x before 0.5.9, Libav 0.6.x be...