CVSS: 8.8EPSS: 2%CPEs: 33EXPL: 0CVE-2012-0858 – Gentoo Linux Security Advisory 201210-06
https://notcve.org/view.php?id=CVE-2012-0858
15 May 2012 — The Shorten codec (shorten.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted Shorten file, related to an "invalid free". El codec Shorten (shorten.c) en libavcodec de FFmpeg en v0.7.x antes de v0.7.12 y v0.8.x antes de v0.8.11, y en Libav v0.5.x antes de v0.5.9, v0.6.x ... • http://ffmpeg.org • CWE-399: Resource Management Errors •
CVSS: 8.8EPSS: 3%CPEs: 33EXPL: 0CVE-2011-3947 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2011-3947
14 May 2012 — Buffer overflow in mjpegbdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MJPEG-B file. Un desbordamiento de búfer en mjpegbdec.c en libavcodec en FFmpeg v0.7.x antes de v0.7.12 y v0.8.x antes de v0.8.11, y en Libav v0.5.x antes de v0.5.9, v0.6.x antes de v0.6.6, v0.7.x antes d... • http://ffmpeg.org • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 6.5EPSS: 1%CPEs: 41EXPL: 0CVE-2011-3936 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2011-3936
14 May 2012 — The dv_extract_audio function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted DV file. La función dv_extract_audio en libavcodec de FFmpeg en v0.7.x antes de v0.7.12 y v0.8.x antes de y v0.8.11 y en Libav v0.5.x antes de v0.5.9, v0.6.x antes de v0.6.6, v0.7.x antes de v0.7.5 y v0.8.x a... • http://ffmpeg.org • CWE-20: Improper Input Validation •
CVSS: 6.8EPSS: 1%CPEs: 33EXPL: 0CVE-2011-3940 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2011-3940
14 May 2012 — nsvdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (out-of-bounds read and write) via a crafted NSV file that triggers "use of uninitialized streams." nsvdec.c en libavcodec de FFmpeg en v0.7.x antes de v0.7.12 y v0.8.x antes de v0.8.11, y en Libav v0.5.x antes de v0.5.9, v0.6.x antes de v0.6.6, v0.7.x antes de v0.7.5 y v0.8.x antes ... • http://ffmpeg.org • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.8EPSS: 2%CPEs: 33EXPL: 0CVE-2011-3929 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2011-3929
14 May 2012 — The avpriv_dv_produce_packet function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) and possibly execute arbitrary code via a crafted DV file. La función avpriv_dv_produce_packet en libavcodec de FFmpeg v0.7.x antes de v0.7.12 y y v0.8.x antes de v0.8.11 en Libav v0.5.x antes de v0.5.9, v0.6... • http://ffmpeg.org • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 6.8EPSS: 1%CPEs: 40EXPL: 1CVE-2012-0853 – Gentoo Linux Security Advisory 201210-06
https://notcve.org/view.php?id=CVE-2012-0853
14 May 2012 — The decodeTonalComponents function in the Actrac3 codec (atrac3.c) in libavcodec in FFmpeg 0.7.x before 0.7.12, and 0.8.x before 0.8.11; and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (infinite loop and crash) and possibly execute arbitrary code via a large component count in an Atrac 3 file. La función decodeTonalComponents en el codec Actrac3 (atrac3.c) en libavcodec de FFmpeg v0.7.x antes de v0.7.12, y v... • http://ffmpeg.org/trac/ffmpeg/ticket/780 • CWE-20: Improper Input Validation •
CVSS: 8.8EPSS: 1%CPEs: 1EXPL: 0CVE-2011-4031 – Ubuntu Security Notice USN-1478-1
https://notcve.org/view.php?id=CVE-2011-4031
09 May 2012 — Integer underflow in the asfrtp_parse_packet function in libavformat/rtpdec_asf.c in FFmpeg before 0.8.3 allows remote attackers to execute arbitrary code via a crafted ASF packet. Desbordamiento de entero en la función asfrtp_parse_packet en libavformat/rtpdec_asf.c en FFmpeg antes de v0.8.3, permite a atacantes remotos ejecutar secuencias de comandos a través de un paquete ASF manipulado. Mateusz Jurczyk and Gynvael Coldwind discovered that Libav incorrectly handled certain malformed DV files. If a user w... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=c2a2ad133eb9d42361804a568dee336992349a5e • CWE-191: Integer Underflow (Wrap or Wraparound) •
CVSS: 8.8EPSS: 4%CPEs: 42EXPL: 0CVE-2011-4352 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2011-4352
06 Jan 2012 — Integer overflow in the vp3_dequant function in the VP3 decoder (vp3.c) in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VP3 stream, which triggers a buffer overflow. Desbordamiento de entero en la función vp3_dequant en el decodificador VP3 (vp3.c) en libavcodec en... • http://ffmpeg.org • CWE-189: Numeric Errors •
CVSS: 6.5EPSS: 0%CPEs: 37EXPL: 0CVE-2011-4353 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2011-4353
03 Jan 2012 — The (1) av_image_fill_pointers, (2) vp5_parse_coeff, and (3) vp6_parse_coeff functions in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allow remote attackers to cause a denial of service (out-of-bounds read) via a crafted VP5 or VP6 stream. Las funciones (1) av_image_fill_pointers, (2) vp5_parse_coeff, y (3) vp6_parse_coeff en FFmpeg v0.5.x anterior a v0.5.7, v0.6.x anterior a v0.6.4, v0... • http://ffmpeg.org • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.8EPSS: 2%CPEs: 40EXPL: 0CVE-2011-4351 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2011-4351
03 Jan 2012 — Buffer overflow in FFmpeg before 0.5.6, 0.6.x before 0.6.4, 0.7.x before 0.7.8, and 0.8.x before 0.8.8 allows remote attackers to execute arbitrary code via unspecified vectors. Desbordamiento de búfer en FFmpeg anterior a la versión 0.5.6, 0.6.x anterior a 0.6.4, 0.7.x anterior a la versión 0.7.8, y 0.8.x anterior a 0.8.8 permite a atacantes remotos ejecutar código arbitrario a través de vectores sin especificar. Steve Manzuik discovered that Libav incorrectly handled certain malformed Matroska files. If a... • http://seclists.org/bugtraq/2011/Nov/145 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •