PT-2017-14723

Name of the Vulnerable Software and Affected Versions Libav version 12.2 Description The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault and application crash, or possibly have other unspecified impacts via a crafted file. This is due to a problem in...

PT-2017-14721

Name of the Vulnerable Software and Affected Versions Libav version 12.2 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via a crafted file. This is due to a problem in the vc1 decode frame function in...

PT-2012-4267

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.11 Libav versions prior to 0.8.4 Description The issue is related to inconsistencies in coded slice positions and interlacing that trigger out of array writes in the vc1 decode frame function. This function is locate...

FFmpeg畸形"VC1"文件解析内存破坏远程代码执行漏洞

BUGTRAQ ID: 47151 CVE ID: CVE-2011-0723 FFmpeg是一个自由软件，可以执行音讯和视讯多种格式的录影、转档、串流功能，包含了libavcodec ─这是一个用于多个专案中音讯和视讯的解码器函式库，以及 libavformat ——一个音讯与视讯格式转换函式库。 FFmpeg在解析畸形VC1文件时存在内存破坏远程代码执行漏洞，远程攻击者可利用此漏洞在受影响应用程序中执行任意代码或造成拒绝服务。 Ubuntu Linux 9.x Ubuntu Linux 8.x Ubuntu Linux 10.x FFmpeg FFmpeg = 0.5.4 厂商补丁：...

Ubuntu Update for ffmpeg vulnerabilities USN-1104-1

Ubuntu Update for Linux kernel vulnerabilities USN-1104-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11041.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for ffmpeg vulnerabilities USN-1104-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

GGmpeg library multiple security vulnerabilities

Buffer overflow on Vorbis / WebM files decoding, memory corruption on RealMedia and VC1 files...

Ubuntu 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : ffmpeg vulnerabilities (USN-1104-1)

Cesar Bernardini and Felipe Andres Manzano discovered that FFmpeg incorrectly handled certain malformed flic files. If a user were tricked into opening a crafted flic file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of...