
CVE-2013-0872 – Gentoo Linux Security Advisory 201603-06
https://notcve.org/view.php?id=CVE-2013-0872
23 Nov 2013 — The swr_init function in libswresample/swresample.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid or unsupported (1) input or (2) output channel layout, related to an out-of-bounds array access. La función swr_init en libswresample/swresample.c de FFmpeg anterior a la versión 1.1.3 permite a atacantes remotos generar un impacto no especificado a través de (2) entradas o (2) salidas inválidas o sin soporte en el diseño del canal, relacionado con un array de acces... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=21cd905cd44a4bbafe8631bbaa6021d328413ce5 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVE-2013-0873 – Gentoo Linux Security Advisory 201603-06
https://notcve.org/view.php?id=CVE-2013-0873
23 Nov 2013 — The read_header function in libavcodec/shorten.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid channel count, related to "freeing invalid addresses." La función read_header en libavcodec/shorten.c de FFmpeg anterior a la versión 1.1.3 permite a atacantes remotos generar un impacto sin especificar a través de un contador de canal inválido, relacionado con "direcciones de liberación inválidas". Multiple vulnerabilities have been found in FFmpeg, the worst of which... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=4f1279154ee9baf2078241bf5619774970d18b25 • CWE-20: Improper Input Validation •

CVE-2013-0874 – Gentoo Linux Security Advisory 201603-06
https://notcve.org/view.php?id=CVE-2013-0874
23 Nov 2013 — The (1) doubles2str and (2) shorts2str functions in libavcodec/tiff.c in FFmpeg before 1.1.3 allow remote attackers to have an unspecified impact via a crafted TIFF image, related to an out-of-bounds array access. Las funciones (1) doubles2str y (2) shorts2str en libavcodec/tiff.c en FFmpeg anterior a la versión 1.1.3 permite a atacantes remotos provocar un impacto no especificado a través de una imagen TIFF manipulada, relacionada con un array de acceso fuera de límite. Multiple vulnerabilities have been f... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=e1219cdaf9fb4bc8cea410e1caf802373c1bfe51 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVE-2013-0875 – Gentoo Linux Security Advisory 201603-06
https://notcve.org/view.php?id=CVE-2013-0875
23 Nov 2013 — The ff_add_png_paeth_prediction function in libavcodec/pngdec.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via a crafted PNG image, related to an out-of-bounds array access. La función ff_add_png_paeth_prediction en libavcodec/pngdec.c de FFmpeg anterior a la versión 1.1.3 permite a atacantes remotos generar un impacto no especificado a través de una imagen PNG manipulada, relacionado con un array de acceso fuera de límites. Multiple vulnerabilities have been found in FFmpe... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=1ac0fa50eff30d413206cffa5f47f7fe6d4849b1 • CWE-189: Numeric Errors •

CVE-2013-0876 – Gentoo Linux Security Advisory 201603-06
https://notcve.org/view.php?id=CVE-2013-0876
23 Nov 2013 — Multiple integer overflows in the (1) old_codec37 and (2) old_codec47 functions in libavcodec/sanm.c in FFmpeg before 1.1.3 allow remote attackers to have an unspecified impact via crafted LucasArts Smush data, which triggers an out-of-bounds array access. Desbordamiento de enteros múltiple en las funciones (1) old_codec37 y (2) old_codec47 de libavcodec/sanm.c de FFmpeg anterior a la versión 1.1.3 permite a atacantes remotos generar un impacto no especificado a través de datos LucasArts Smush manipulados, ... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=5260edee7e5bd975837696c8c8c1a80eb2fbd7c1 • CWE-189: Numeric Errors •

CVE-2013-0877 – Gentoo Linux Security Advisory 201603-06
https://notcve.org/view.php?id=CVE-2013-0877
23 Nov 2013 — The old_codec37 function in libavcodec/sanm.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via crafted LucasArts Smush data that has a large size when decoded, related to an out-of-bounds array access. La función old_codec37 en libavcodec/sanm.c de FFmpeg anterior a la versión 1.1.3 permite a atacantes remotos generar un impacto sin especificar a través de datos LucasArts Smush manipulados que tienen un tamaño grande cuando son decodificados, relacionado con un array de acces... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=365270aec5c2b9284230abc702b11168818f14cf • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVE-2013-0878 – Gentoo Linux Security Advisory 201603-06
https://notcve.org/view.php?id=CVE-2013-0878
23 Nov 2013 — The advance_line function in libavcodec/targa.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via crafted Targa image data, related to an out-of-bounds array access. La función advance_line de libavcodec/targa.c en FFmpeg anterior a la versión 1.1.3 permite a atacantes remotos generar un impacto no especificado a través de datos de imagen Targa, relacionado con un array de acceso fuera de límite. Multiple vulnerabilities have been found in FFmpeg, the worst of which could lead... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=f5955d9f6f9ffdb81864c3de1c7b801782a55725 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVE-2013-0844 – Debian Security Advisory 2793-1
https://notcve.org/view.php?id=CVE-2013-0844
11 Nov 2013 — Off-by-one error in the adpcm_decode_frame function in libavcodec/adpcm.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via crafted DK4 data, which triggers an out-of-bounds array access. Error de off-by-one en la función adpcm_decode_frame en libavcodec/adpcm.c en FFmpeg anteriores a 1.0.4 permite a atacantes remotos tener un impacto no especificado a través de datos DK4 manipulados, lo cual provoca un acceso a array fuera de límites. Several security issues have been correct... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=85a14dbd5dca34320f58b1ba11dd6dd0df4fb3be • CWE-189: Numeric Errors •

CVE-2013-0850 – Debian Security Advisory 2793-1
https://notcve.org/view.php?id=CVE-2013-0850
11 Nov 2013 — The decode_slice_header function in libavcodec/h264.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted H.264 data, which triggers an out-of-bounds array access. La función decode_slice_header en libavcodec/h264.c en FFmpeg anteriores a 1.1 permite a atacantes remotos tener un impacto no especificado a través de datos H.264 manipulados, lo cual lanza un acceso a array fuera de límites. Several security issues have been corrected in multiple demuxers and decoders of the l... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=d6c184880ee2e09fd68c0ae217173832cee5afc1 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVE-2013-0853 – Debian Security Advisory 2793-1
https://notcve.org/view.php?id=CVE-2013-0853
11 Nov 2013 — The wavpack_decode_frame function in libavcodec/wavpack.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted WavPack data, which triggers an out-of-bounds array access, possibly due to an off-by-one error. La función wavpack_decode_frame en libavcodec/wavpack.c en FFmpeg anterior a v1.1 permite a atacantes remotods tener un impacto no especificado a través de información WavPack manipulada, lo que desencadena un acceso fuera de limites en un array, posiblemente debido a u... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=be818df547c3b0ae4fadb50fd210139a8636706a • CWE-189: Numeric Errors •