Arbitrary Code Execution

libvpx is vulnerable to arbitrary code execution. An integer overflow flaw, leading to arbitrary memory writes, was found in libvpx. An attacker could create a specially-crafted video encoded using the VP8 codec that, when played by a victim with an application using libvpx such as Totem, would...

libvpx: User-assisted execution of arbitrary code

Background libvpx is the VP8 codec SDK used to encode and decode video streams, typically within a WebM format media file. Description Multiple vulnerabilities have been discovered in libvpx. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a...

The vulnerability of Google Chrome’s VP8 component, which allows a hacker to trigger a service failure

The vulnerability of Google Chrome’s VP8 codec is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a specially created video file...

[SECURITY] Fedora 24 Update: libwebp-0.5.1-2.fc24

WebP is an image format that does lossy compression of digital photographic images. WebP consists of a codec based on VP8, and a container based on RIFF. Webmasters, web developers and browser developers can use WebP to compress, archive and distribute digital images more efficiently...

Fedora Update for libwebp FEDORA-2013-1494

Check for the Version of libwebp OpenVAS Vulnerability Test Fedora Update for libwebp FEDORA-2013-1494 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for libwebp FEDORA-2013-1473

Check for the Version of libwebp OpenVAS Vulnerability Test Fedora Update for libwebp FEDORA-2013-1473 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 18 Update: libwebp-0.2.1-1.fc18

WebP is an image format that does lossy compression of digital photographic images. WebP consists of a codec based on VP8, and a container based on RIFF. Webmasters, web developers and browser developers can use WebP to compress, archive and distribute digital images more efficiently...

[SECURITY] Fedora 16 Update: libwebp-0.2.1-1.fc16

WebP is an image format that does lossy compression of digital photographic images. WebP consists of a codec based on VP8, and a container based on RIFF. Webmasters, web developers and browser developers can use WebP to compress, archive and distribute digital images more efficiently...

[ MDVSA-2012:023-1 ] libvpx

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2012:023-1 http://www.mandriva.com/security/ Package : libvpx Date : February 28, 2012 Affected: 2010.1, 2011. Problem Description: A vulnerability has been found and corrected in libvpx: VP8 Codec SDK libvpx...

Mandriva Update for libvpx MDVSA-2012:023 (libvpx)

Check for the Version of libvpx OpenVAS Vulnerability Test Mandriva Update for libvpx MDVSA-2012:023 libvpx Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for libvpx MDVSA-2012:023-1 (libvpx)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-0823

VP8 Codec SDK libvpx before 1.0.0 "Duclair" allows remote attackers to cause a denial of service application crash via 1 unspecified "corrupt input" or 2 by "starting decoding from a P-frame," which triggers an out-of-bounds read, related to "the clamping of motion vectors in SPLITMV blocks"...

CVE-2012-0823

VP8 Codec SDK libvpx before 1.0.0 "Duclair" allows remote attackers to cause a denial of service application crash via 1 unspecified "corrupt input" or 2 by "starting decoding from a P-frame," which triggers an out-of-bounds read, related to "the clamping of motion vectors in SPLITMV blocks"...

CVE-2012-0823

VP8 Codec SDK libvpx before 1.0.0 "Duclair" allows remote attackers to cause a denial of service application crash via 1 unspecified "corrupt input" or 2 by "starting decoding from a P-frame," which triggers an out-of-bounds read, related to "the clamping of motion vectors in SPLITMV blocks"...

Out-of-bounds

VP8 Codec SDK libvpx before 1.0.0 "Duclair" allows remote attackers to cause a denial of service application crash via 1 unspecified "corrupt input" or 2 by "starting decoding from a P-frame," which triggers an out-of-bounds read, related to "the clamping of motion vectors in SPLITMV blocks"...

CVE-2012-0823

CVE-2012-0823 affects the VP8 Codec SDK (libvpx) prior to 1.0.0 (code-named “Duclair”). The issue arises from the clamping of motion vectors in SPLITMV blocks, enabling an out-of-bounds read when decoding from a P-frame or from unspecified corrupt input, which can cause an application crash (DoS)...

Mandriva Linux Security Advisory : libvpx (MDVSA-2012:023-1)

A vulnerability has been found and corrected in libvpx : VP8 Codec SDK libvpx before 1.0.0 Duclair allows remote attackers to cause a denial of service application crash via 1 unspecified corrupt input or 2 by starting decoding from a P-frame, which triggers an out-of-bounds read, related to the...

Fedora Update for libvpx FEDORA-2012-1147

Check for the Version of libvpx OpenVAS Vulnerability Test Fedora Update for libvpx FEDORA-2012-1147 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

libvpx: User-assisted execution of arbitrary code

Background libvpx is the VP8 codec SDK used to encode and decode video streams, typically within a WebM format media file. Description libvpx is vulnerable to an integer overflow vulnerability when processing crafted VP8 video streams. Impact A remote attacker could entice a user to open a...

Fedora Update for libvpx FEDORA-2010-17893

Check for the Version of libvpx OpenVAS Vulnerability Test Fedora Update for libvpx FEDORA-2010-17893 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...