CVSS: 6.5EPSS: 0%CPEs: 43EXPL: 0CVE-2012-0855
https://notcve.org/view.php?id=CVE-2012-0855
27 Aug 2012 — Heap-based buffer overflow in the get_sot function in the J2K decoder (j2k.c) in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) via unspecified vectors related to the curtileno variable. Desbordamiento de bufer basado en memoria dinámica (heap) en la función get_sot en el decodificador J2K (j2k.c) en libavcodec de FFmpeg anterior a v0.9.1 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de vectores no e... • http://ffmpeg.org/security.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.8EPSS: 2%CPEs: 40EXPL: 0CVE-2011-3945 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2011-3945
20 Aug 2012 — The decode_frame function in the KVG1 decoder (kgv1dec.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted media file. La función decode_frame en el decodificador KVG1 (kgv1dec.c) en libavcodec en FFmpeg v0.7.x anterior a v0.7.12 y v0.8.x anterior a v0.8.11, y en Libav v0.5.x anterio... • http://ffmpeg.org • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.8EPSS: 4%CPEs: 42EXPL: 0CVE-2011-4352 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2011-4352
20 Aug 2012 — Integer overflow in the vp3_dequant function in the VP3 decoder (vp3.c) in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VP3 stream, which triggers a buffer overflow. Desbordamiento de entero en la función vp3_dequant en el decodificador VP3 (vp3.c) en libavcodec en... • http://ffmpeg.org • CWE-189: Numeric Errors •
CVSS: 6.5EPSS: 0%CPEs: 37EXPL: 0CVE-2011-4353 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2011-4353
20 Aug 2012 — The (1) av_image_fill_pointers, (2) vp5_parse_coeff, and (3) vp6_parse_coeff functions in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allow remote attackers to cause a denial of service (out-of-bounds read) via a crafted VP5 or VP6 stream. Las funciones (1) av_image_fill_pointers, (2) vp5_parse_coeff, y (3) vp6_parse_coeff en FFmpeg v0.5.x anterior a v0.5.7, v0.6.x anterior a v0.6.4, v0... • http://ffmpeg.org • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.8EPSS: 2%CPEs: 40EXPL: 0CVE-2011-4364 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2011-4364
20 Aug 2012 — Buffer overflow in the Sierra VMD decoder in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9 and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VMD file, related to corrupted streams. Desbordamiento de búfer en el decodificador Sierra VMD en libavcodec en FFmpeg v0.5.x anterior a v0.5.7, v0.6.x anterior a v0.6.4, v0.7.... • http://ffmpeg.org • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 6.5EPSS: 0%CPEs: 37EXPL: 0CVE-2011-4579
https://notcve.org/view.php?id=CVE-2011-4579
20 Aug 2012 — The svq1_decode_frame function in the SVQ1 decoder (svq1dec.c) in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of service (memory corruption) via a crafted SVQ1 stream, related to "dimensions changed." La función svq1_decode_frame en el decodificador SVQ1 (svq1dec.c) en libavcodec en FFmpeg v0.5.x anterior a v0.5.7, v0.6.x anterior ... • http://ffmpeg.org • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.5EPSS: 0%CPEs: 14EXPL: 0CVE-2012-0847
https://notcve.org/view.php?id=CVE-2012-0847
20 Aug 2012 — Heap-based buffer overflow in the avfilter_filter_samples function in libavfilter/avfilter.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) via a crafted media file. Un desbordamiento de búfer basado en memoria dinámica ('heap') en la función avfilter_filter_samples en libavfilter/avfilter.c en FFmpeg antes de v0.9.1 permite a atacantes remotos provocar una denegación de servicio (por caída de la aplicación) a través de un archivo debidamente modificado. • http://ffmpeg.org/security.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2012-0848
https://notcve.org/view.php?id=CVE-2012-0848
20 Aug 2012 — Heap-based buffer overflow in the ws_snd_decode_frame function in libavcodec/ws-snd1.c in FFmpeg 0.9.1 allows remote attackers to cause a denial of service (application crash) via a crafted media file, related to an incorrect calculation, aka "wrong samples count." Un desbordamiento de búfer basado en memoria dinámica ('heap') en la función ws_snd_decode_frame en libavcodec/ws-snd1.c en FFmpeg v0.9.1 permite a atacantes remotos provocar una denegación de servicio (por caída de la aplicación) a través de un ... • http://ffmpeg.org/security.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.5EPSS: 0%CPEs: 43EXPL: 0CVE-2012-0850
https://notcve.org/view.php?id=CVE-2012-0850
20 Aug 2012 — The sbr_qmf_synthesis function in libavcodec/aacsbr.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) via a crafted mpg file that triggers memory corruption involving the v_off variable, probably a buffer underflow. La función sbr_qmf_synthesis en libavcodec/aacsbr.c en FFmpeg antes de v0.9.1 permite a atacantes remotos provocar una denegación de servicio (por caída de la aplicación) a través de un archivo debidamente modificado que provoca daños en la memoria... • http://ffmpeg.org/security.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 0%CPEs: 43EXPL: 0CVE-2012-0854
https://notcve.org/view.php?id=CVE-2012-0854
20 Aug 2012 — The dpcm_decode_frame function in libavcodec/dpcm.c in FFmpeg before 0.9.1 does not use the proper pointer after an audio API change, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors, which triggers a heap-based buffer overflow. La función dpcm_decode_frame en libavcodec/dpcm.c en FFmpeg antes de v0.9.1 no utiliza el puntero adecuado después de un cambio de API de audio, lo que permite a atacantes remotos provocar una denegación de servicio (por caída de... • http://ffmpeg.org/security.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •