CVSS: 8.8EPSS: 2%CPEs: 64EXPL: 1CVE-2013-7014 – Debian Security Advisory 2855-1
https://notcve.org/view.php?id=CVE-2013-7014
09 Dec 2013 — Integer signedness error in the add_bytes_l2_c function in libavcodec/pngdsp.c in FFmpeg before 2.1 allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted PNG data. Error de signo en la función add_bytes_l2c de libavcodec/pngdsp.c en FFmepg anteriores a 2.1 permite a atacantes remotos causar una denegación de servicio (acceso a array fuera de rango) o posiblemente tener un impacto no especificado a través de datos PNG manipulad... • http://ffmpeg.org/security.html • CWE-189: Numeric Errors •
CVSS: 8.8EPSS: 0%CPEs: 64EXPL: 2CVE-2013-7024 – Gentoo Linux Security Advisory 201603-06
https://notcve.org/view.php?id=CVE-2013-7024
09 Dec 2013 — The jpeg2000_decode_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not consider the component number in certain calculations, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG2000 data. La función jpeg2000_decode_tile en libavcodec/jpeg2000dec.c en FFmpeg anterior a v2.1 no tiene en cuenta el número de componente en ciertos cálculos, lo que permite a atacantes remotos provocar una denegación... • http://ffmpeg.org/security.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.8EPSS: 0%CPEs: 64EXPL: 2CVE-2013-7022 – Gentoo Linux Security Advisory 201603-06
https://notcve.org/view.php?id=CVE-2013-7022
09 Dec 2013 — The g2m_init_buffers function in libavcodec/g2meet.c in FFmpeg before 2.1 does not properly allocate memory for tiles, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Go2Webinar data. La función g2m_init_buffers en libavcodec/g2meet.c en FFmpeg anterior a v2.1 no maneja correctamente la memoria para mosaicos, lo que permite a atacantes remotos provocar una denegación de servicio (acceso a array fuera de rango) o po... • http://ffmpeg.org/security.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.8EPSS: 0%CPEs: 55EXPL: 0CVE-2013-0847
https://notcve.org/view.php?id=CVE-2013-0847
07 Dec 2013 — The ff_id3v2_parse function in libavformat/id3v2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via ID3v2 header data, which triggers an out-of-bounds array access. La función ff_id3v2_parse en libavformat/id3v2.c en FFmpeg anteriores a 1.1 permite a atacantes remotos conseguir un impacto no especificado a través de información de cabecera ID3v2, lo cual activa un acceso a array fuera de límites. • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=10416a4d56fa8a89784e4fb62099c3cab17a9952 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 0%CPEs: 55EXPL: 0CVE-2013-0846 – Debian Security Advisory 2855-1
https://notcve.org/view.php?id=CVE-2013-0846
07 Dec 2013 — Array index error in the qdm2_decode_super_block function in libavcodec/qdm2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted QDM2 data, which triggers an out-of-bounds array access. Error de índice de array en la función qdm2_decode_super_block en libavcodec/qdm2.c en FFmpeg anteriores a 1.1 permite a atacantes remotos tener un impacto no especificado a través de datos QDM2 manipulados, lo cual provoca un acceso a array fuera de límites. Several security issues have ... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=a7ee6281f7ef1c29284e3a4cadfe0f227ffde1ed • CWE-20: Improper Input Validation •
CVSS: 9.3EPSS: 0%CPEs: 55EXPL: 0CVE-2013-0856
https://notcve.org/view.php?id=CVE-2013-0856
07 Dec 2013 — The lpc_prediction function in libavcodec/alac.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted Apple Lossless Audio Codec (ALAC) data, related to a large nb_samples value. La función lpc_prediction en libavcodec/alac.c en FFmpeg anteriores a 1.1 permite a atacantes remotos tener un impacto no especificado a través de datos Apple Lossless Audio Codec (ALAC), relacionado con un valor nb_samples grande. • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=fd4f4923cce6a2cbf4f48640b4ac706e614a1594 • CWE-20: Improper Input Validation •
CVSS: 9.3EPSS: 0%CPEs: 55EXPL: 0CVE-2013-0851 – Debian Security Advisory 3003-1
https://notcve.org/view.php?id=CVE-2013-0851
07 Dec 2013 — The decode_frame function in libavcodec/eamad.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted Electronic Arts Madcow video data, which triggers an out-of-bounds array access. La función decode_frame en libavcodec/eamad.c en FFmpeg anterior a v1.1 permite a atacantes remotods tener un impacto no especificado a través de información de video Electronic Arts Madcow manipulada, lo que desencadena un acceso fuera de limites en un array. Multiple vulnerabilities have been ... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=63ac64864c6e0e84355aa3caa5b92208997a9a8d • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 0%CPEs: 55EXPL: 0CVE-2013-0849 – Debian Security Advisory 2855-1
https://notcve.org/view.php?id=CVE-2013-0849
07 Dec 2013 — The roq_decode_init function in libavcodec/roqvideodec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted (1) width or (2) height dimension that is not a multiple of sixteen in id RoQ video data. La función roq_decode_init en libavcodec/roqvideodec.c en FFmpeg anterior a v1.1 permite a atacantes remotos tener un impacto no especificado a través de una dimensión manipulada de (1) ancho o (2) alto que no sea múltiple de 16 en id RoQ video. Several security issues have b... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=3ae610451170cd5a28b33950006ff0bd23036845 • CWE-20: Improper Input Validation •
CVSS: 9.8EPSS: 0%CPEs: 55EXPL: 0CVE-2013-0852 – Debian Security Advisory 3003-1
https://notcve.org/view.php?id=CVE-2013-0852
07 Dec 2013 — The parse_picture_segment function in libavcodec/pgssubdec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted RLE data, which triggers an out-of-bounds array access. La función parse_picture_segment en libavcodec/pgssubdec.c en FFmpeg anterior a v1.1 permite a atacantes remotos tener un impacto no especificado a través de datos RLE manipulados, lo que desencadena un acceso fuera de limites en un array. The decode_init function in libavcodec/huffyuv.c in FFmpeg before 1.... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=c0d68be555f5858703383040e04fcd6529777061 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.8EPSS: 0%CPEs: 55EXPL: 0CVE-2013-0855
https://notcve.org/view.php?id=CVE-2013-0855
07 Dec 2013 — Integer overflow in the alac_decode_close function in libavcodec/alac.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a large number of samples per frame in Apple Lossless Audio Codec (ALAC) data, which triggers an out-of-bounds array access. Desbordamiento de entero en la función alac_decode_close en libavcodec/alac.c en FFmpeg anteriores a 1.1 permite a atacantes remotos tener un impacto no especificado a través de un gran número de muestras por frame en datos Apple Lossle... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=3920d1387834e2bc334aff9f518f4beb24e470bd • CWE-189: Numeric Errors •