EUVD-2012-0948

Malware in sbrugna...

ffmpeg:ffmpeg_AV_CODEC_ID_RV40_fuzzer: Use-of-uninitialized-value in ff_er_frame_end

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4615653984632832 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDRV40fuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

CVE-2015-6826

The ffrv34decodeinitthreadcopy function in libavcodec/rv34.c in FFmpeg before 2.7.2 does not initialize certain structure members, which allows remote attackers to cause a denial of service invalid pointer access or possibly have unspecified other impact via crafted 1 RV30 or 2 RV40 RealVideo dat...

CVE-2015-6826

The ffrv34decodeinitthreadcopy function in libavcodec/rv34.c in FFmpeg before 2.7.2 does not initialize certain structure members, which allows remote attackers to cause a denial of service invalid pointer access or possibly have unspecified other impact via crafted 1 RV30 or 2 RV40 RealVideo dat...

CVE-2015-6826

CVE-2015-6826 affects FFmpeg’s libavcodec/rv34.c: the function ff_rv34_decode_init_thread_copy does not initialize certain structure members, which can allow a remote attacker to trigger a denial of service (invalid pointer access) or other impact via crafted RealVideo data (RV30 or RV40). The vu...

CVE-2015-6826

The ffrv34decodeinitthreadcopy function in libavcodec/rv34.c in FFmpeg before 2.7.2 does not initialize certain structure members, which allows remote attackers to cause a denial of service invalid pointer access or possibly have unspecified other impact via crafted 1 RV30 or 2 RV40 RealVideo dat...

UBUNTU-CVE-2015-6826

The ffrv34decodeinitthreadcopy function in libavcodec/rv34.c in FFmpeg before 2.7.2 does not initialize certain structure members, which allows remote attackers to cause a denial of service invalid pointer access or possibly have unspecified other impact via crafted 1 RV30 or 2 RV40 RealVideo dat...

CVE-2015-6826

The ffrv34decodeinitthreadcopy function in libavcodec/rv34.c in FFmpeg before 2.7.2 does not initialize certain structure members, which allows remote attackers to cause a denial of service invalid pointer access or possibly have unspecified other impact via crafted 1 RV30 or 2 RV40 RealVideo dat...

PT-2015-7378

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.7.2 Description The issue is related to the ff rv34 decode init thread copy function in libavcodec/rv34.c, which does not initialize certain structure members. This allows remote attackers to cause a denial of servic...

RealNetworks RealPlayer RV40 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required in that a target must visit a malicious page or open a malicious file. The flaw exists within the rv40.dll component for RealNetworks RealPlaye...

Code injection

Unspecified vulnerability in the RV40 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted RV40 RealVideo video stream...

CVE-2012-0925

Unspecified vulnerability in the RV40 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted RV40 RealVideo video stream...

CVE-2012-0925

RealPlayer RV40 remote code execution vulnerability (CVE-2012-0925) affects RealPlayer 11.x, 14.x, 15.x before 15.02.71 and RealPlayer SP 1.0–1.1.5. The flaw is in rv40.dll when parsing RV40 sample data, where a miscalculated offset can lead to arbitrary code execution. Exploitation requires a us...

Real Networks RealPlayer < 15.0.2.72 Multiple Vulnerabilities

Binary data 6311.prm...

CVE-2012-0925: Improper Control of Generation of Code

Unspecified vulnerability in the RV40 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted RV40 RealVideo video stream...

PT-2012-2955

Name of the Vulnerable Software and Affected Versions RealPlayer versions 11.x through 15.x before 15.02.71 RealPlayer SP versions 1.0 through 1.1.5 Description The issue allows remote attackers to execute arbitrary code via a crafted RV40 RealVideo video stream. Recommendations For RealPlayer...