CVSS: 9.3EPSS: 0%CPEs: 58EXPL: 0CVE-2013-0877 – Gentoo Linux Security Advisory 201603-06
https://notcve.org/view.php?id=CVE-2013-0877
23 Nov 2013 — The old_codec37 function in libavcodec/sanm.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via crafted LucasArts Smush data that has a large size when decoded, related to an out-of-bounds array access. La función old_codec37 en libavcodec/sanm.c de FFmpeg anterior a la versión 1.1.3 permite a atacantes remotos generar un impacto sin especificar a través de datos LucasArts Smush manipulados que tienen un tamaño grande cuando son decodificados, relacionado con un array de acces... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=365270aec5c2b9284230abc702b11168818f14cf • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 0%CPEs: 61EXPL: 1CVE-2013-4265 – Gentoo Linux Security Advisory 201603-06
https://notcve.org/view.php?id=CVE-2013-4265
23 Nov 2013 — The av_reallocp_array function in libavutil/mem.c in FFmpeg before 2.0.1 has an unspecified impact and remote vectors related to a "wrong return code" and a resultant NULL pointer dereference. La función av_reallocp_array en libavutil/mem.c de FFmpeg anterior a la versión 2.0.1 tiene un impacto sin especificar y vectores remotos relacionados con un "código de retorno incorrecto", resultante en una referencia a puntero nulo. Multiple vulnerabilities have been found in FFmpeg, the worst of which could lead to... • http://www.ffmpeg.org/security.html •
CVSS: 10.0EPSS: 1%CPEs: 58EXPL: 0CVE-2013-0873 – Gentoo Linux Security Advisory 201603-06
https://notcve.org/view.php?id=CVE-2013-0873
23 Nov 2013 — The read_header function in libavcodec/shorten.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid channel count, related to "freeing invalid addresses." La función read_header en libavcodec/shorten.c de FFmpeg anterior a la versión 1.1.3 permite a atacantes remotos generar un impacto sin especificar a través de un contador de canal inválido, relacionado con "direcciones de liberación inválidas". Multiple vulnerabilities have been found in FFmpeg, the worst of which... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=4f1279154ee9baf2078241bf5619774970d18b25 • CWE-20: Improper Input Validation •
CVSS: 6.5EPSS: 0%CPEs: 61EXPL: 1CVE-2013-4264 – Gentoo Linux Security Advisory 201603-06
https://notcve.org/view.php?id=CVE-2013-4264
23 Nov 2013 — The kempf_decode_tile function in libavcodec/g2meet.c in FFmpeg before 2.0.1 allows remote attackers to cause a denial of service (out-of-bounds heap write) via a G2M4 encoded file. La función kempf_decode_tile en libavcodec/g2meet.c de FFmpeg anterior a la versión 2.0.1 permite a atacantes remotos provocar una denegación de servicio (escritura de memoria dinámica fuera de límites) a través de un archivo G2M4 codificado. Multiple vulnerabilities have been found in FFmpeg, the worst of which could lead to ar... • http://www.ffmpeg.org/security.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 0%CPEs: 58EXPL: 0CVE-2013-0878 – Gentoo Linux Security Advisory 201603-06
https://notcve.org/view.php?id=CVE-2013-0878
23 Nov 2013 — The advance_line function in libavcodec/targa.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via crafted Targa image data, related to an out-of-bounds array access. La función advance_line de libavcodec/targa.c en FFmpeg anterior a la versión 1.1.3 permite a atacantes remotos generar un impacto no especificado a través de datos de imagen Targa, relacionado con un array de acceso fuera de límite. Multiple vulnerabilities have been found in FFmpeg, the worst of which could lead... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=f5955d9f6f9ffdb81864c3de1c7b801782a55725 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 0%CPEs: 55EXPL: 0CVE-2013-0854 – Debian Security Advisory 2793-1
https://notcve.org/view.php?id=CVE-2013-0854
11 Nov 2013 — The mjpeg_decode_scan_progressive_ac function in libavcodec/mjpegdec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted MJPEG data. La función mjpeg_decode_scan_progressive_ac en libavcodec/mjpegdec.c de FFmpeg anterior a la versión 1.1 permite a atacantes remotos llevar a cabo un impacto no especificado a través de datos MJPEG manipulados. Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=1f41cffe1e3e79620f587545bdfcbd7e6e68ed29 • CWE-20: Improper Input Validation •
CVSS: 9.8EPSS: 1%CPEs: 58EXPL: 0CVE-2013-0858 – Debian Security Advisory 2793-1
https://notcve.org/view.php?id=CVE-2013-0858
11 Nov 2013 — The atrac3_decode_init function in libavcodec/atrac3.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via ATRAC3 data with the joint stereo coding mode set and fewer than two channels. La función atrac3_decode_init en libavcodec/atrac3.c en FFmpeg anteriores a 1.0.4 permite a atacantes remotos tener un impacto no especificado a través de datos ATRAC3 con el modo de coficiación "joint stereo" establecido y menos de dos canales. Several security issues have been corrected in mult... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=13451f5520ce6b0afde861b2285dda659f8d4fb4 •
CVSS: 9.3EPSS: 0%CPEs: 57EXPL: 0CVE-2013-0844 – Debian Security Advisory 2793-1
https://notcve.org/view.php?id=CVE-2013-0844
11 Nov 2013 — Off-by-one error in the adpcm_decode_frame function in libavcodec/adpcm.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via crafted DK4 data, which triggers an out-of-bounds array access. Error de off-by-one en la función adpcm_decode_frame en libavcodec/adpcm.c en FFmpeg anteriores a 1.0.4 permite a atacantes remotos tener un impacto no especificado a través de datos DK4 manipulados, lo cual provoca un acceso a array fuera de límites. Several security issues have been correct... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=85a14dbd5dca34320f58b1ba11dd6dd0df4fb3be • CWE-189: Numeric Errors •
CVSS: 9.3EPSS: 0%CPEs: 55EXPL: 0CVE-2013-0857 – Debian Security Advisory 2793-1
https://notcve.org/view.php?id=CVE-2013-0857
11 Nov 2013 — The decode_frame_ilbm function in libavcodec/iff.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted height value in IFF PBM/ILBM bitmap data. La función decode_frame_ilbm en libavcodec/iff.c en FFmpeg anterior a v1.1 permite a atacantes remotos tener un impacto no especificado a través de un valor de altura manipulado en la información de mapa de bits de IFF PBM/ILBM. Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=2fbb37b51bbea891392ad357baf8f3dff00bac05 • CWE-20: Improper Input Validation •
CVSS: 9.8EPSS: 1%CPEs: 59EXPL: 0CVE-2013-0866 – Debian Security Advisory 2793-1
https://notcve.org/view.php?id=CVE-2013-0866
11 Nov 2013 — The aac_decode_init function in libavcodec/aacdec.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attackers to have an unspecified impact via a large number of channels in an AAC file, which triggers an out-of-bounds array access. La función aac_decode_init en libavcodec / aacdec.c en FFmpeg anterior a 1.0.4 y 1.1.x anterior a 1.1.2 permite a atacantes remotos tener un impacto no especificado a través de un gran número de canales en un archivo AAC, lo que desencadena un acceso fuera de limites... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=47e462eecc0a47ad40f59376199f93f227e21d13 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •