CVSS: 9.8EPSS: 0%CPEs: 51EXPL: 0CVE-2011-3941 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2011-3941
25 Oct 2013 — The decode_mb function in libavcodec/error_resilience.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via vectors related to an uninitialized block index, which triggers an out-of-bounds write. La función decode_mb en el archivo libavcodec/error_resilience.c en FFmpeg anterior a versión 0.10, permite a los atacantes remotos tener un impacto no especificado por medio de vectores relacionados con un índice de bloque no inicializado, que desencadena una escritura fuera de límites.... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=c77be3a35a0160d6af88056b0899f120f2eef38e • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.8EPSS: 0%CPEs: 51EXPL: 0CVE-2011-3944 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2011-3944
25 Oct 2013 — The smacker_decode_header_tree function in libavcodec/smacker.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Smacker data. La función smacker_decode_header_tree en libavcodec/smacker.c de FFmpeg anterior a la versión 0.10 permite a atacantes remotos tener un impacto no especificado a través de datos Smacker. Multiple vulnerabilities were found in FFmpeg, the worst of which might enable remote attackers to cause user-assisted execution of arbitrary code. Versions le... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=1285baaab550e3e761590ef6dfb1d9bd9d1332e4 •
CVSS: 9.1EPSS: 0%CPEs: 51EXPL: 0CVE-2011-3946 – Debian Security Advisory 3003-1
https://notcve.org/view.php?id=CVE-2011-3946
25 Oct 2013 — The ff_h264_decode_sei function in libavcodec/h264_sei.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Supplemental enhancement information (SEI) data, which triggers an infinite loop. La función ff_h264_decode_sei en libavcodec/h264_sei.c en FFmpeg anteriores a 0.10 permite a atacantes remotos tener un impacto no especificado a través datos "Supplemental enhancement information" (SEI), lo que dispara un bucle infinito. Multiple vulnerabilities were found in FFmpeg,... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=9decfc17bb76da34734296048d390b176abf404c • CWE-399: Resource Management Errors •
CVSS: 8.8EPSS: 0%CPEs: 51EXPL: 0CVE-2011-3949 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2011-3949
25 Oct 2013 — The dirac_unpack_idwt_params function in libavcodec/diracdec.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Dirac data. La función dirac_unpack_idwt_params en libavcodec/diracdec.c de FFmpeg anterior a la versión 0.10 permite a atacantes remotos tener un impacto no especificado a través de datos Dirac. Multiple vulnerabilities were found in FFmpeg, the worst of which might enable remote attackers to cause user-assisted execution of arbitrary code. Versions less tha... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=e2291ea1534d17306f685b8c8abc8585bbed87bf •
CVSS: 8.8EPSS: 0%CPEs: 51EXPL: 0CVE-2011-3950 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2011-3950
25 Oct 2013 — The dirac_decode_data_unit function in libavcodec/diracdec.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via a crafted value in the reference pictures number. La función dirac_decode_data_unit en libavcodec/diracdec.c en FFmpeg anterior a v0.10 permite a atacantes remotos tener un impacto no especificado a través de un valor manipulado en el número de referencia de las imágenes. Multiple vulnerabilities were found in FFmpeg, the worst of which might enable remote attackers to... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=ddf0c1d86ad8e1df5ab3265206aef493a1bdc813 •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2013-3670 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2013-3670
10 Jun 2013 — The rle_unpack function in vmdav.c in libavcodec in FFmpeg git 20130328 through 20130501 does not properly use the bytestream2 API, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) via crafted RLE data. NOTE: the vendor has listed this as an issue fixed in 1.2.1, but the issue is actually in new code that was not shipped with the 1.2.1 release or any earlier release. La función rle_unpack en vmdav.c en libavcodec en FFmpeg git 20130328 a la 201305... • http://ffmpeg.org/security.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2013-3671 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2013-3671
10 Jun 2013 — The format_line function in log.c in libavutil in FFmpeg before 1.2.1 uses inapplicable offset data during a certain category calculation, which allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via crafted data that triggers a log message. La función format_line en log.c en libavutil en FFmpeg anterior a 1.2.1 utiliza datos offset inaplicables durante el cálculo de determinadas categorías, lo que permite a atacantes remotos provocar una denegación de s... • http://ffmpeg.org/security.html • CWE-189: Numeric Errors •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2013-3672 – Debian Security Advisory 3003-1
https://notcve.org/view.php?id=CVE-2013-3672
10 Jun 2013 — The mm_decode_inter function in mmvideo.c in libavcodec in FFmpeg before 1.2.1 does not validate the relationship between a horizontal coordinate and a width value, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) via crafted American Laser Games (ALG) MM Video data. La función mm_decode_inter en mmvideo.c en libavcodec en FFmpeg anterior a 1.2.1 no valida adecuadamente la relación entre la coordenada horizontal y el valor "with", lo que permite a... • http://ffmpeg.org/security.html • CWE-20: Improper Input Validation •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2013-3673 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2013-3673
10 Jun 2013 — The gif_decode_frame function in gifdec.c in libavcodec in FFmpeg before 1.2.1 does not properly manage the disposal methods of frames, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) via crafted GIF data. La función gif_decode_frame en gifdec.c en libavcodec en FFmpeg anterior a 1.2.1 no administra adecuadamente la disposición de los métodos de los frames, lo que permite a atacantes remotos provocar una denegación de servicio (acceso a array fue... • http://ffmpeg.org/security.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 1%CPEs: 1EXPL: 0CVE-2013-3674 – Debian Security Advisory 3003-1
https://notcve.org/view.php?id=CVE-2013-3674
10 Jun 2013 — The cdg_decode_frame function in cdgraphics.c in libavcodec in FFmpeg before 1.2.1 does not validate the presence of non-header data in a buffer, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) via crafted CD Graphics Video data. La función cdg_decode_frame en cdgraphics.c en libavcodec en FFmpeg anterior a 1.2.1 no valida la presencia de datos non-header en el búfer, lo que permite a atacantes remotos provocar una denegación de servicio (acceso ... • http://ffmpeg.org/security.html • CWE-20: Improper Input Validation •