CVSS: 8.8EPSS: 0%CPEs: 51EXPL: 0CVE-2011-3934 – Debian Security Advisory 3003-1
https://notcve.org/view.php?id=CVE-2011-3934
25 Oct 2013 — Double free vulnerability in the vp3_update_thread_context function in libavcodec/vp3.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted vp3 data. Vulnerabilidad de doble liberación en la función vp3_update_thread_context en libavcodec/vp3.c de FFmpeg anterior a la versión 0.10, permite a atacantes remotos llevar a cabo un impacto no especificado a través de datos vp3 manipulados. Multiple vulnerabilities were found in FFmpeg, the worst of which might enable remote att... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=247d30a7dba6684ccce4508424f35fd58465e535 • CWE-399: Resource Management Errors •
CVSS: 8.8EPSS: 0%CPEs: 51EXPL: 0CVE-2011-3935 – Debian Security Advisory 3003-1
https://notcve.org/view.php?id=CVE-2011-3935
25 Oct 2013 — The codec_get_buffer function in ffmpeg.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via vectors related to a crafted image size. La función codec_get_buffer en ffmpeg.c en FFmpeg anterior a la versión 0.10 permite a atacantes remotos tener un impacto no especificado a través de vectores relacionados con el tamaño de una imagen manipulada. Multiple vulnerabilities were found in FFmpeg, the worst of which might enable remote attackers to cause user-assisted execution of arbit... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=668494acd8b20f974c7722895d4a6a14c1005f1e •
CVSS: 9.8EPSS: 0%CPEs: 51EXPL: 0CVE-2011-3941 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2011-3941
25 Oct 2013 — The decode_mb function in libavcodec/error_resilience.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via vectors related to an uninitialized block index, which triggers an out-of-bounds write. La función decode_mb en el archivo libavcodec/error_resilience.c en FFmpeg anterior a versión 0.10, permite a los atacantes remotos tener un impacto no especificado por medio de vectores relacionados con un índice de bloque no inicializado, que desencadena una escritura fuera de límites.... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=c77be3a35a0160d6af88056b0899f120f2eef38e • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.8EPSS: 0%CPEs: 51EXPL: 0CVE-2011-3944 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2011-3944
25 Oct 2013 — The smacker_decode_header_tree function in libavcodec/smacker.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Smacker data. La función smacker_decode_header_tree en libavcodec/smacker.c de FFmpeg anterior a la versión 0.10 permite a atacantes remotos tener un impacto no especificado a través de datos Smacker. Multiple vulnerabilities were found in FFmpeg, the worst of which might enable remote attackers to cause user-assisted execution of arbitrary code. Versions le... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=1285baaab550e3e761590ef6dfb1d9bd9d1332e4 •
CVSS: 9.1EPSS: 0%CPEs: 51EXPL: 0CVE-2011-3946 – Debian Security Advisory 3003-1
https://notcve.org/view.php?id=CVE-2011-3946
25 Oct 2013 — The ff_h264_decode_sei function in libavcodec/h264_sei.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Supplemental enhancement information (SEI) data, which triggers an infinite loop. La función ff_h264_decode_sei en libavcodec/h264_sei.c en FFmpeg anteriores a 0.10 permite a atacantes remotos tener un impacto no especificado a través datos "Supplemental enhancement information" (SEI), lo que dispara un bucle infinito. Multiple vulnerabilities were found in FFmpeg,... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=9decfc17bb76da34734296048d390b176abf404c • CWE-399: Resource Management Errors •
CVSS: 8.8EPSS: 0%CPEs: 51EXPL: 0CVE-2011-3949 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2011-3949
25 Oct 2013 — The dirac_unpack_idwt_params function in libavcodec/diracdec.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Dirac data. La función dirac_unpack_idwt_params en libavcodec/diracdec.c de FFmpeg anterior a la versión 0.10 permite a atacantes remotos tener un impacto no especificado a través de datos Dirac. Multiple vulnerabilities were found in FFmpeg, the worst of which might enable remote attackers to cause user-assisted execution of arbitrary code. Versions less tha... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=e2291ea1534d17306f685b8c8abc8585bbed87bf •
CVSS: 8.8EPSS: 0%CPEs: 51EXPL: 0CVE-2011-3950 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2011-3950
25 Oct 2013 — The dirac_decode_data_unit function in libavcodec/diracdec.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via a crafted value in the reference pictures number. La función dirac_decode_data_unit en libavcodec/diracdec.c en FFmpeg anterior a v0.10 permite a atacantes remotos tener un impacto no especificado a través de un valor manipulado en el número de referencia de las imágenes. Multiple vulnerabilities were found in FFmpeg, the worst of which might enable remote attackers to... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=ddf0c1d86ad8e1df5ab3265206aef493a1bdc813 •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2013-3670 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2013-3670
10 Jun 2013 — The rle_unpack function in vmdav.c in libavcodec in FFmpeg git 20130328 through 20130501 does not properly use the bytestream2 API, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) via crafted RLE data. NOTE: the vendor has listed this as an issue fixed in 1.2.1, but the issue is actually in new code that was not shipped with the 1.2.1 release or any earlier release. La función rle_unpack en vmdav.c en libavcodec en FFmpeg git 20130328 a la 201305... • http://ffmpeg.org/security.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2013-3671 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2013-3671
10 Jun 2013 — The format_line function in log.c in libavutil in FFmpeg before 1.2.1 uses inapplicable offset data during a certain category calculation, which allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via crafted data that triggers a log message. La función format_line en log.c en libavutil en FFmpeg anterior a 1.2.1 utiliza datos offset inaplicables durante el cálculo de determinadas categorías, lo que permite a atacantes remotos provocar una denegación de s... • http://ffmpeg.org/security.html • CWE-189: Numeric Errors •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2013-3672 – Debian Security Advisory 3003-1
https://notcve.org/view.php?id=CVE-2013-3672
10 Jun 2013 — The mm_decode_inter function in mmvideo.c in libavcodec in FFmpeg before 1.2.1 does not validate the relationship between a horizontal coordinate and a width value, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) via crafted American Laser Games (ALG) MM Video data. La función mm_decode_inter en mmvideo.c en libavcodec en FFmpeg anterior a 1.2.1 no valida adecuadamente la relación entre la coordenada horizontal y el valor "with", lo que permite a... • http://ffmpeg.org/security.html • CWE-20: Improper Input Validation •