CVSS: 9.3EPSS: 0%CPEs: 58EXPL: 0CVE-2013-0877 – Gentoo Linux Security Advisory 201603-06
https://notcve.org/view.php?id=CVE-2013-0877
23 Nov 2013 — The old_codec37 function in libavcodec/sanm.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via crafted LucasArts Smush data that has a large size when decoded, related to an out-of-bounds array access. La función old_codec37 en libavcodec/sanm.c de FFmpeg anterior a la versión 1.1.3 permite a atacantes remotos generar un impacto sin especificar a través de datos LucasArts Smush manipulados que tienen un tamaño grande cuando son decodificados, relacionado con un array de acces... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=365270aec5c2b9284230abc702b11168818f14cf • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 0%CPEs: 58EXPL: 0CVE-2013-0878 – Gentoo Linux Security Advisory 201603-06
https://notcve.org/view.php?id=CVE-2013-0878
23 Nov 2013 — The advance_line function in libavcodec/targa.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via crafted Targa image data, related to an out-of-bounds array access. La función advance_line de libavcodec/targa.c en FFmpeg anterior a la versión 1.1.3 permite a atacantes remotos generar un impacto no especificado a través de datos de imagen Targa, relacionado con un array de acceso fuera de límite. Multiple vulnerabilities have been found in FFmpeg, the worst of which could lead... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=f5955d9f6f9ffdb81864c3de1c7b801782a55725 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 0%CPEs: 57EXPL: 0CVE-2013-0844 – Debian Security Advisory 2793-1
https://notcve.org/view.php?id=CVE-2013-0844
11 Nov 2013 — Off-by-one error in the adpcm_decode_frame function in libavcodec/adpcm.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via crafted DK4 data, which triggers an out-of-bounds array access. Error de off-by-one en la función adpcm_decode_frame en libavcodec/adpcm.c en FFmpeg anteriores a 1.0.4 permite a atacantes remotos tener un impacto no especificado a través de datos DK4 manipulados, lo cual provoca un acceso a array fuera de límites. Several security issues have been correct... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=85a14dbd5dca34320f58b1ba11dd6dd0df4fb3be • CWE-189: Numeric Errors •
CVSS: 9.3EPSS: 0%CPEs: 55EXPL: 0CVE-2013-0850 – Debian Security Advisory 2793-1
https://notcve.org/view.php?id=CVE-2013-0850
11 Nov 2013 — The decode_slice_header function in libavcodec/h264.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted H.264 data, which triggers an out-of-bounds array access. La función decode_slice_header en libavcodec/h264.c en FFmpeg anteriores a 1.1 permite a atacantes remotos tener un impacto no especificado a través de datos H.264 manipulados, lo cual lanza un acceso a array fuera de límites. Several security issues have been corrected in multiple demuxers and decoders of the l... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=d6c184880ee2e09fd68c0ae217173832cee5afc1 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 0%CPEs: 55EXPL: 0CVE-2013-0853 – Debian Security Advisory 2793-1
https://notcve.org/view.php?id=CVE-2013-0853
11 Nov 2013 — The wavpack_decode_frame function in libavcodec/wavpack.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted WavPack data, which triggers an out-of-bounds array access, possibly due to an off-by-one error. La función wavpack_decode_frame en libavcodec/wavpack.c en FFmpeg anterior a v1.1 permite a atacantes remotods tener un impacto no especificado a través de información WavPack manipulada, lo que desencadena un acceso fuera de limites en un array, posiblemente debido a u... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=be818df547c3b0ae4fadb50fd210139a8636706a • CWE-189: Numeric Errors •
CVSS: 9.3EPSS: 0%CPEs: 55EXPL: 0CVE-2013-0854 – Debian Security Advisory 2793-1
https://notcve.org/view.php?id=CVE-2013-0854
11 Nov 2013 — The mjpeg_decode_scan_progressive_ac function in libavcodec/mjpegdec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted MJPEG data. La función mjpeg_decode_scan_progressive_ac en libavcodec/mjpegdec.c de FFmpeg anterior a la versión 1.1 permite a atacantes remotos llevar a cabo un impacto no especificado a través de datos MJPEG manipulados. Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=1f41cffe1e3e79620f587545bdfcbd7e6e68ed29 • CWE-20: Improper Input Validation •
CVSS: 9.3EPSS: 0%CPEs: 55EXPL: 0CVE-2013-0857 – Debian Security Advisory 2793-1
https://notcve.org/view.php?id=CVE-2013-0857
11 Nov 2013 — The decode_frame_ilbm function in libavcodec/iff.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted height value in IFF PBM/ILBM bitmap data. La función decode_frame_ilbm en libavcodec/iff.c en FFmpeg anterior a v1.1 permite a atacantes remotos tener un impacto no especificado a través de un valor de altura manipulado en la información de mapa de bits de IFF PBM/ILBM. Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=2fbb37b51bbea891392ad357baf8f3dff00bac05 • CWE-20: Improper Input Validation •
CVSS: 9.8EPSS: 1%CPEs: 58EXPL: 0CVE-2013-0858 – Debian Security Advisory 2793-1
https://notcve.org/view.php?id=CVE-2013-0858
11 Nov 2013 — The atrac3_decode_init function in libavcodec/atrac3.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via ATRAC3 data with the joint stereo coding mode set and fewer than two channels. La función atrac3_decode_init en libavcodec/atrac3.c en FFmpeg anteriores a 1.0.4 permite a atacantes remotos tener un impacto no especificado a través de datos ATRAC3 con el modo de coficiación "joint stereo" establecido y menos de dos canales. Several security issues have been corrected in mult... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=13451f5520ce6b0afde861b2285dda659f8d4fb4 •
CVSS: 9.8EPSS: 1%CPEs: 59EXPL: 0CVE-2013-0866 – Debian Security Advisory 2793-1
https://notcve.org/view.php?id=CVE-2013-0866
11 Nov 2013 — The aac_decode_init function in libavcodec/aacdec.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attackers to have an unspecified impact via a large number of channels in an AAC file, which triggers an out-of-bounds array access. La función aac_decode_init en libavcodec / aacdec.c en FFmpeg anterior a 1.0.4 y 1.1.x anterior a 1.1.2 permite a atacantes remotos tener un impacto no especificado a través de un gran número de canales en un archivo AAC, lo que desencadena un acceso fuera de limites... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=47e462eecc0a47ad40f59376199f93f227e21d13 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.8EPSS: 0%CPEs: 51EXPL: 0CVE-2011-3934 – Debian Security Advisory 3003-1
https://notcve.org/view.php?id=CVE-2011-3934
25 Oct 2013 — Double free vulnerability in the vp3_update_thread_context function in libavcodec/vp3.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted vp3 data. Vulnerabilidad de doble liberación en la función vp3_update_thread_context en libavcodec/vp3.c de FFmpeg anterior a la versión 0.10, permite a atacantes remotos llevar a cabo un impacto no especificado a través de datos vp3 manipulados. Multiple vulnerabilities were found in FFmpeg, the worst of which might enable remote att... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=247d30a7dba6684ccce4508424f35fd58465e535 • CWE-399: Resource Management Errors •