CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2018-1999013
https://notcve.org/view.php?id=CVE-2018-1999013
23 Jul 2018 — FFmpeg before commit a7e032a277452366771951e29fd0bf2bd5c029f0 contains a use-after-free vulnerability in the realmedia demuxer that can result in vulnerability allows attacker to read heap memory. This attack appear to be exploitable via specially crafted RM file has to be provided as input. This vulnerability appears to have been fixed in a7e032a277452366771951e29fd0bf2bd5c029f0 and later. FFmpeg antes del commit con ID a7e032a277452366771951e29fd0bf2bd5c029f0 contiene una vulnerabilidad de uso de memoria ... • http://www.securityfocus.com/bid/104896 • CWE-416: Use After Free •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2018-14394
https://notcve.org/view.php?id=CVE-2018-14394
19 Jul 2018 — libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service (application crash caused by a divide-by-zero error) with a user crafted Waveform audio file. libavformat/movenc.c en FFmpeg en versiones anteriores a la 4.0.2 permite que los atacantes provoquen una denegación de servicio (cierre inesperado de la aplicación provocado por un error de división entre cero) con un archivo de audio Waveform manipulado por el usuario. • https://github.com/FFmpeg/FFmpeg/commit/3a2d21bc5f97aa0161db3ae731fc2732be6108b8 • CWE-369: Divide By Zero •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2018-7751 – Gentoo Linux Security Advisory 202003-65
https://notcve.org/view.php?id=CVE-2018-7751
24 Apr 2018 — The svg_probe function in libavformat/img2dec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (Infinite Loop) via a crafted XML file. La función svg_probe en libavformat/img2dec.c en FFmpeg 3.4.2 permite que atacantes remotos provoquen una denegación de servicio (bucle infinito) mediante un archivo XML manipulado. Multiple vulnerabilities have been found in FFmpeg, the worst of which allows remote attackers to execute arbitrary code. Versions greater than or equal to 4 are aff... • http://www.securityfocus.com/bid/103956 • CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2018-10001 – Gentoo Linux Security Advisory 202003-65
https://notcve.org/view.php?id=CVE-2018-10001
11 Apr 2018 — The decode_init function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (out of array read) via an AVI file. La función decode_init en libavcodec/utvideodec.c en FFmpeg hasta la versión 3.4.2 permite a atacantes remotos causar una denegación de servicio (lectura fuera de array) utilizando un archivo AVI. Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=47b7c68ae54560e2308bdb6be4fb076c73b93081 • CWE-125: Out-of-bounds Read •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2018-9841 – Gentoo Linux Security Advisory 202003-65
https://notcve.org/view.php?id=CVE-2018-9841
07 Apr 2018 — The export function in libavfilter/vf_signature.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (out-of-array access) or possibly have unspecified other impact via a long filename. La función export en libavfilter/vf_signature.c en FFmpeg, hasta la versión 3.4.2, permite que atacantes remotos provoquen una denegación de servicio (acceso fuera de límites) o, probablemente, provocar cualquier otro tipo de impacto mediante un nombre de archivo largo. Multiple vulnerabilities have... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=35eeff30caf34df835206f1c12bcf4b7c2bd6758 • CWE-125: Out-of-bounds Read •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2018-6912 – Gentoo Linux Security Advisory 202003-65
https://notcve.org/view.php?id=CVE-2018-6912
12 Feb 2018 — The decode_plane function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (out of array read) via a crafted AVI file. La función decode_plane en libavcodec/utvideodec.c en FFmpeg hasta la versión 3.4.2 permite a atacantes remotos causar una denegación de servicio (lectura fuera de array) utilizando un archivo AVI manipulado. Multiple vulnerabilities have been found in FFmpeg, the worst of which allows remote attackers to execute arbitrary code. Version... • https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/76cc0f0f673353cd4746cd3b83838ae335e5d9ed • CWE-125: Out-of-bounds Read •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2012-5360
https://notcve.org/view.php?id=CVE-2012-5360
08 Feb 2018 — Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted QT file. Libavcodec en FFmpeg, en versiones anteriores a la 0.11, permite que atacantes remotos ejecuten código arbitrario mediante un archivo QT manipulado. • https://docs.microsoft.com/en-us/security-updates/VulnerabilityResearchAdvisories/2012/msvr12-017 • CWE-20: Improper Input Validation •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2012-5359
https://notcve.org/view.php?id=CVE-2012-5359
08 Feb 2018 — Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted ASF file. Libavcodec en FFmpeg, en versiones anteriores a la 0.11, permite que atacantes remotos ejecuten código arbitrario mediante un archivo ASF manipulado. • https://docs.microsoft.com/en-us/security-updates/VulnerabilityResearchAdvisories/2012/msvr12-017 • CWE-20: Improper Input Validation •
CVSS: 6.5EPSS: 1%CPEs: 3EXPL: 0CVE-2018-6621 – Debian Security Advisory 4249-1
https://notcve.org/view.php?id=CVE-2018-6621
05 Feb 2018 — The decode_frame function in libavcodec/utvideodec.c in FFmpeg through 3.2 allows remote attackers to cause a denial of service (out of array read) via a crafted AVI file. La función decode_frame en libavcodec/utvideodec.c en FFmpeg hasta la versión 3.2 permite a atacantes remotos causar una denegación de servicio (lectura fuera de array) utilizando un archivo AVI manipulado Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentiall... • http://www.securityfocus.com/bid/102950 • CWE-125: Out-of-bounds Read •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2018-6392 – Debian Security Advisory 4249-1
https://notcve.org/view.php?id=CVE-2018-6392
29 Jan 2018 — The filter_slice function in libavfilter/vf_transpose.c in FFmpeg through 3.4.1 allows remote attackers to cause a denial of service (out-of-array access) via a crafted MP4 file. La función filter_slice en libavfilter/vf_transpose.c en FFmpeg hasta la versión 3.4.1 permite a atacantes remotos causar una denegación de servicio (acceso fuera de array) utilizando un archivo MP4 manipulado. Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service o... • http://www.securityfocus.com/bid/102848 • CWE-125: Out-of-bounds Read •