CVSS: 8.8EPSS: 2%CPEs: 1EXPL: 0CVE-2011-4031
https://notcve.org/view.php?id=CVE-2011-4031
09 May 2012 — Integer underflow in the asfrtp_parse_packet function in libavformat/rtpdec_asf.c in FFmpeg before 0.8.3 allows remote attackers to execute arbitrary code via a crafted ASF packet. Desbordamiento de entero en la función asfrtp_parse_packet en libavformat/rtpdec_asf.c en FFmpeg antes de v0.8.3, permite a atacantes remotos ejecutar secuencias de comandos a través de un paquete ASF manipulado. • http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=c2a2ad133eb9d42361804a568dee336992349a5e • CWE-191: Integer Underflow (Wrap or Wraparound) •
CVSS: 6.5EPSS: 1%CPEs: 28EXPL: 0CVE-2011-3974 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2011-3974
02 Oct 2011 — Integer signedness error in the decode_residual_inter function in cavsdec.c in libavcodec in FFmpeg before 0.7.4 and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (incorrect write operation and application crash) via an invalid bitstream in a Chinese AVS video (aka CAVS) file, a different vulnerability than CVE-2011-3362. Error de signo de entero en la función decode_residual_inter en cavsdec.c en libavcodec de FFmpeg antes de v0.7.4 y en v0.8.x antes de v0.8.3 permite a atacantes ... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=bd968d260aef322fb32e254a3de0d2036c57bd56 • CWE-189: Numeric Errors •
CVSS: 8.8EPSS: 3%CPEs: 49EXPL: 0CVE-2011-3362 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2011-3362
02 Oct 2011 — Integer signedness error in the decode_residual_block function in cavsdec.c in libavcodec in FFmpeg before 0.7.3 and 0.8.x before 0.8.2, and libav through 0.7.1, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Chinese AVS video (aka CAVS) file. Error de signo de entero en la función decode_residual_block en cavsdec.c en libavcodec de FFmpeg antes de v0.7.3 y en v0.8.x antes de v0.8.2, y v0.7.1 a través de libav, ... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=91d5da9321c52e8197fb14046ebb335f3e6ff4a0 • CWE-189: Numeric Errors •
CVSS: 6.5EPSS: 1%CPEs: 28EXPL: 0CVE-2011-3973 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2011-3973
02 Oct 2011 — cavsdec.c in libavcodec in FFmpeg before 0.7.4 and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (incorrect write operation and application crash) via an invalid bitstream in a Chinese AVS video (aka CAVS) file, related to the decode_residual_block, check_for_slice, and cavs_decode_frame functions, a different vulnerability than CVE-2011-3362. cavsdec.c en libavcodec de FFmpeg antes de v0.7.4 y en v0.8.x antes de v0.8.3 permite a atacantes remotos causar una denegación de servicio ... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=bd968d260aef322fb32e254a3de0d2036c57bd56 • CWE-399: Resource Management Errors •
CVSS: 9.3EPSS: 4%CPEs: 24EXPL: 0CVE-2011-3504
https://notcve.org/view.php?id=CVE-2011-3504
29 Sep 2011 — The Matroska format decoder in FFmpeg before 0.8.3 does not properly allocate memory, which allows remote attackers to execute arbitrary code via a crafted file. El decodificador de formato Matroska en FFmpeg antes de v0.8.3 no asigna correctamente la memoria, lo que permite a atacantes remotos ejecutar código arbitrario mediante un archivo modificado. • http://secunia.com/advisories/45532 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 7.8EPSS: 2%CPEs: 115EXPL: 0CVE-2011-1931 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2011-1931
07 Jul 2011 — sp5xdec.c in the Sunplus SP5X JPEG decoder in libavcodec in FFmpeg before 0.6.3 and libav through 0.6.2, as used in VideoLAN VLC media player 1.1.9 and earlier and other products, performs a write operation outside the bounds of an unspecified array, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a malformed AMV file. sp5xdec.c en el decodificador Sunplus SP5X JPEG en libavcodec en FFmpeg antes de v0.6.3 y libav hasta v0.6.2, tal y como ... • http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624339 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.8EPSS: 2%CPEs: 5EXPL: 0CVE-2011-0723
https://notcve.org/view.php?id=CVE-2011-0723
20 May 2011 — FFmpeg 0.5.x, as used in MPlayer and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed VC-1 file. FFmpeg v0.5.x, tal como se utiliza en MPlayer y otros productos, permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) o posiblemente ejecutar código arbitrario a través de un formato incorrecto de archivo VC-1. • http://ffmpeg.mplayerhq.hu • CWE-399: Resource Management Errors •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2011-2161
https://notcve.org/view.php?id=CVE-2011-2161
20 May 2011 — The ape_read_header function in ape.c in libavformat in FFmpeg before 0.5.4, as used in MPlayer, VideoLAN VLC media player, and other products, allows remote attackers to cause a denial of service (application crash) via an APE (aka Monkey's Audio) file that contains a header but no frames. La función ape_read_header en ape.c en libavformat en FFmpeg antes de v0.5.4, tal como se utiliza en MPlayer, VideoLAN VLC media player, y otros productos, permite a atacantes remotos provocar una denegación de servicio ... • http://ffmpeg.mplayerhq.hu • CWE-399: Resource Management Errors •
CVSS: 8.8EPSS: 1%CPEs: 19EXPL: 0CVE-2010-3908 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2010-3908
20 May 2011 — FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a malformed WMV file. FFmpeg antes de v0.5.4, tal como se utiliza en MPlayer y otros productos, permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y bloqueo de la aplicación) o posiblemente ejecutar código de su elección a través de un formato incorrecto de archivo WMV. Multiple vu... • http://ffmpeg.mplayerhq.hu • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 0%CPEs: 20EXPL: 0CVE-2011-2162
https://notcve.org/view.php?id=CVE-2011-2162
20 May 2011 — Multiple unspecified vulnerabilities in FFmpeg 0.4.x through 0.6.x, as used in MPlayer 1.0 and other products, in Mandriva Linux 2009.0, 2010.0, and 2010.1; Corporate Server 4.0 (aka CS4.0); and Mandriva Enterprise Server 5 (aka MES5) have unknown impact and attack vectors, related to issues "originally discovered by Google Chrome developers." Múltiples vulnerabilidades no especificadas en FFmpeg v0.4.x hasta v0.6.x, tal como se utiliza en MPlayer v1.0 y otros productos, en Mandriva Linux v2009.0, v2010.0 y... • http://www.mandriva.com/security/advisories?name=MDVSA-2011:059 •