CVE-2014-2263
https://notcve.org/view.php?id=CVE-2014-2263
The mpegts_write_pmt function in the MPEG2 transport stream (aka DVB) muxer (libavformat/mpegtsenc.c) in FFmpeg, possibly 2.1 and earlier, allows remote attackers to have unspecified impact and vectors, which trigger an out-of-bounds write. La función mpegts_write_pmt en el muxer (libavformat/mpegtsenc.c) del flujo de transporte MPEG2 (también conocido como DVB) en FFmpeg, posiblemente 2.1 y anteriores, permite a atacantes remotos tener impacto y vectores no especificados, lo que provoca una escritura fuera de limites. • http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=842b6c14bc http://secunia.com/advisories/56971 http://www.securityfocus.com/bid/65560 http://www.securitytracker.com/id/1029850 https://exchange.xforce.ibmcloud.com/vulnerabilities/91174 https://security.gentoo.org/glsa/201603-06 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2012-6615
https://notcve.org/view.php?id=CVE-2012-6615
The ff_ass_split_override_codes function in libavcodec/ass_split.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a subtitle dialog without text. La función ff_ass_split_override_codes en libavcodec/ass_split.c en FFmpeg anteriores a 1.0.2 permite a atacantes remotos causar denegación de servicio (referencia a puntero NULL y caída) a través de un diálogo de subtítulos sin texto. • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=20c121c00747d6c3b0b0f98deeff021171b2ed74 http://secunia.com/advisories/51964 http://www.ffmpeg.org/security.html http://www.osvdb.org/89592 https://trac.ffmpeg.org/ticket/2048 •
CVE-2012-6617
https://notcve.org/view.php?id=CVE-2012-6617
The prepare_sdp_description function in ffserver.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service (crash) via vectors related to the rtp format. La función prepare_sdp_descriptoin en ffserver.c en FFmpeg anteriores a 1.0.2 permite a atacantes remotos causar denegación de servicio (caída) a través de vectores relacionados con el formato rtp. • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=9929991da7b843e7d80154fcacc4e80579b86a2d http://secunia.com/advisories/51964 http://www.ffmpeg.org/security.html http://www.osvdb.org/93232 https://trac.ffmpeg.org/ticket/1986 •
CVE-2012-6616
https://notcve.org/view.php?id=CVE-2012-6616
The mov_text_decode_frame function in libavcodec/movtextdec.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via crafted 3GPP TS 26.245 data. La función mov_text_decode_frame en libavcodec/movtextdec.c en FFmpeg anteriores a 1.0.2 permite a atacantes remotos causar denegación de servicio (lectura fuera de límites y caída) a través de datos 3GPP TS 26.245 manipulados. • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=68e48ed72e0597ae61bc3e9e6e6d9edcb1a00073 http://secunia.com/advisories/51964 http://www.ffmpeg.org/security.html http://www.osvdb.org/93242 https://trac.ffmpeg.org/ticket/2087 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2012-6618
https://notcve.org/view.php?id=CVE-2012-6618
The av_probe_input_buffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running with certain -probesize values, allows remote attackers to cause a denial of service (crash) via a crafted MP3 file, possibly related to frame size or lack of sufficient "frames to estimate rate." La función av_probe_input_buffer en libavformat/utils.c en FFmpeg anteriores a 1.0.2, cuando se ejecutan ciertos valores "probesize", permite a atacantes remotos causar denegación de servicio (caída) a través de ficheros MP3 manipulados, posiblemente relacionado con el tamaño del frame o la falta de suficientes frames para estimar la tasa ("frames to estimate rate"). • http://article.gmane.org/gmane.comp.video.ffmpeg.user/42233 http://git.libav.org/?p=libav.git%3Ba=blob%3Bf=Changelog%3Bhb=refs/tags/v9.11 http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=e74cd2f4706f71da5e9205003c1d8263b54ed3fb http://secunia.com/advisories/51964 http://www.ffmpeg.org/security.html https://trac.ffmpeg.org/ticket/1991 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •