CVSS: 9.3EPSS: 0%CPEs: 57EXPL: 0CVE-2013-0844 – Debian Security Advisory 2793-1
https://notcve.org/view.php?id=CVE-2013-0844
11 Nov 2013 — Off-by-one error in the adpcm_decode_frame function in libavcodec/adpcm.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via crafted DK4 data, which triggers an out-of-bounds array access. Error de off-by-one en la función adpcm_decode_frame en libavcodec/adpcm.c en FFmpeg anteriores a 1.0.4 permite a atacantes remotos tener un impacto no especificado a través de datos DK4 manipulados, lo cual provoca un acceso a array fuera de límites. Several security issues have been correct... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=85a14dbd5dca34320f58b1ba11dd6dd0df4fb3be • CWE-189: Numeric Errors •
CVSS: 9.3EPSS: 0%CPEs: 55EXPL: 0CVE-2013-0853 – Debian Security Advisory 2793-1
https://notcve.org/view.php?id=CVE-2013-0853
11 Nov 2013 — The wavpack_decode_frame function in libavcodec/wavpack.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted WavPack data, which triggers an out-of-bounds array access, possibly due to an off-by-one error. La función wavpack_decode_frame en libavcodec/wavpack.c en FFmpeg anterior a v1.1 permite a atacantes remotods tener un impacto no especificado a través de información WavPack manipulada, lo que desencadena un acceso fuera de limites en un array, posiblemente debido a u... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=be818df547c3b0ae4fadb50fd210139a8636706a • CWE-189: Numeric Errors •
CVSS: 9.3EPSS: 0%CPEs: 55EXPL: 0CVE-2013-0857 – Debian Security Advisory 2793-1
https://notcve.org/view.php?id=CVE-2013-0857
11 Nov 2013 — The decode_frame_ilbm function in libavcodec/iff.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted height value in IFF PBM/ILBM bitmap data. La función decode_frame_ilbm en libavcodec/iff.c en FFmpeg anterior a v1.1 permite a atacantes remotos tener un impacto no especificado a través de un valor de altura manipulado en la información de mapa de bits de IFF PBM/ILBM. Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=2fbb37b51bbea891392ad357baf8f3dff00bac05 • CWE-20: Improper Input Validation •
CVSS: 8.8EPSS: 0%CPEs: 51EXPL: 0CVE-2011-3950 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2011-3950
25 Oct 2013 — The dirac_decode_data_unit function in libavcodec/diracdec.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via a crafted value in the reference pictures number. La función dirac_decode_data_unit en libavcodec/diracdec.c en FFmpeg anterior a v0.10 permite a atacantes remotos tener un impacto no especificado a través de un valor manipulado en el número de referencia de las imágenes. Multiple vulnerabilities were found in FFmpeg, the worst of which might enable remote attackers to... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=ddf0c1d86ad8e1df5ab3265206aef493a1bdc813 •
CVSS: 9.1EPSS: 0%CPEs: 51EXPL: 0CVE-2011-3946 – Debian Security Advisory 3003-1
https://notcve.org/view.php?id=CVE-2011-3946
25 Oct 2013 — The ff_h264_decode_sei function in libavcodec/h264_sei.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Supplemental enhancement information (SEI) data, which triggers an infinite loop. La función ff_h264_decode_sei en libavcodec/h264_sei.c en FFmpeg anteriores a 0.10 permite a atacantes remotos tener un impacto no especificado a través datos "Supplemental enhancement information" (SEI), lo que dispara un bucle infinito. Multiple vulnerabilities were found in FFmpeg,... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=9decfc17bb76da34734296048d390b176abf404c • CWE-399: Resource Management Errors •
CVSS: 8.8EPSS: 0%CPEs: 51EXPL: 0CVE-2011-3934 – Debian Security Advisory 3003-1
https://notcve.org/view.php?id=CVE-2011-3934
25 Oct 2013 — Double free vulnerability in the vp3_update_thread_context function in libavcodec/vp3.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted vp3 data. Vulnerabilidad de doble liberación en la función vp3_update_thread_context en libavcodec/vp3.c de FFmpeg anterior a la versión 0.10, permite a atacantes remotos llevar a cabo un impacto no especificado a través de datos vp3 manipulados. Multiple vulnerabilities were found in FFmpeg, the worst of which might enable remote att... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=247d30a7dba6684ccce4508424f35fd58465e535 • CWE-399: Resource Management Errors •
CVSS: 8.8EPSS: 0%CPEs: 51EXPL: 0CVE-2011-3935 – Debian Security Advisory 3003-1
https://notcve.org/view.php?id=CVE-2011-3935
25 Oct 2013 — The codec_get_buffer function in ffmpeg.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via vectors related to a crafted image size. La función codec_get_buffer en ffmpeg.c en FFmpeg anterior a la versión 0.10 permite a atacantes remotos tener un impacto no especificado a través de vectores relacionados con el tamaño de una imagen manipulada. Multiple vulnerabilities were found in FFmpeg, the worst of which might enable remote attackers to cause user-assisted execution of arbit... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=668494acd8b20f974c7722895d4a6a14c1005f1e •
CVSS: 9.8EPSS: 0%CPEs: 51EXPL: 0CVE-2011-3941 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2011-3941
25 Oct 2013 — The decode_mb function in libavcodec/error_resilience.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via vectors related to an uninitialized block index, which triggers an out-of-bounds write. La función decode_mb en el archivo libavcodec/error_resilience.c en FFmpeg anterior a versión 0.10, permite a los atacantes remotos tener un impacto no especificado por medio de vectores relacionados con un índice de bloque no inicializado, que desencadena una escritura fuera de límites.... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=c77be3a35a0160d6af88056b0899f120f2eef38e • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.8EPSS: 0%CPEs: 51EXPL: 0CVE-2011-3949 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2011-3949
25 Oct 2013 — The dirac_unpack_idwt_params function in libavcodec/diracdec.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Dirac data. La función dirac_unpack_idwt_params en libavcodec/diracdec.c de FFmpeg anterior a la versión 0.10 permite a atacantes remotos tener un impacto no especificado a través de datos Dirac. Multiple vulnerabilities were found in FFmpeg, the worst of which might enable remote attackers to cause user-assisted execution of arbitrary code. Versions less tha... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=e2291ea1534d17306f685b8c8abc8585bbed87bf •
CVSS: 9.8EPSS: 3%CPEs: 40EXPL: 0CVE-2011-4351 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2011-4351
25 Oct 2013 — Buffer overflow in FFmpeg before 0.5.6, 0.6.x before 0.6.4, 0.7.x before 0.7.8, and 0.8.x before 0.8.8 allows remote attackers to execute arbitrary code via unspecified vectors. Desbordamiento de búfer en FFmpeg anterior a la versión 0.5.6, 0.6.x anterior a 0.6.4, 0.7.x anterior a la versión 0.7.8, y 0.8.x anterior a 0.8.8 permite a atacantes remotos ejecutar código arbitrario a través de vectores sin especificar. Multiple vulnerabilities were found in FFmpeg, the worst of which might enable remote attacker... • http://seclists.org/bugtraq/2011/Nov/145 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •