CVSS: 8.8EPSS: 2%CPEs: 40EXPL: 0CVE-2011-4364 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2011-4364
20 Aug 2012 — Buffer overflow in the Sierra VMD decoder in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9 and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VMD file, related to corrupted streams. Desbordamiento de búfer en el decodificador Sierra VMD en libavcodec en FFmpeg v0.5.x anterior a v0.5.7, v0.6.x anterior a v0.6.4, v0.7.... • http://ffmpeg.org • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 0%CPEs: 43EXPL: 0CVE-2012-0854
https://notcve.org/view.php?id=CVE-2012-0854
20 Aug 2012 — The dpcm_decode_frame function in libavcodec/dpcm.c in FFmpeg before 0.9.1 does not use the proper pointer after an audio API change, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors, which triggers a heap-based buffer overflow. La función dpcm_decode_frame en libavcodec/dpcm.c en FFmpeg antes de v0.9.1 no utiliza el puntero adecuado después de un cambio de API de audio, lo que permite a atacantes remotos provocar una denegación de servicio (por caída de... • http://ffmpeg.org/security.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.5EPSS: 0%CPEs: 43EXPL: 0CVE-2012-0850
https://notcve.org/view.php?id=CVE-2012-0850
20 Aug 2012 — The sbr_qmf_synthesis function in libavcodec/aacsbr.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) via a crafted mpg file that triggers memory corruption involving the v_off variable, probably a buffer underflow. La función sbr_qmf_synthesis en libavcodec/aacsbr.c en FFmpeg antes de v0.9.1 permite a atacantes remotos provocar una denegación de servicio (por caída de la aplicación) a través de un archivo debidamente modificado que provoca daños en la memoria... • http://ffmpeg.org/security.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 6.5EPSS: 1%CPEs: 43EXPL: 1CVE-2012-0856
https://notcve.org/view.php?id=CVE-2012-0856
20 Aug 2012 — Heap-based buffer overflow in the MPV_frame_start function in libavcodec/mpegvideo.c in FFmpeg before 0.9.1, when the lowres option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted H263 media file. NOTE: this vulnerability exists because of a regression error. Desbordamiento de búfer basado en memoria dinámica en la función MPV_frame_start en libavcodec/mpegvideo.c en FFmpeg anterior a v0.9.1, cuando la opción (lowres) está activada, permite a atacantes remo... • http://ffmpeg.org/security.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.5EPSS: 0%CPEs: 14EXPL: 0CVE-2012-0847
https://notcve.org/view.php?id=CVE-2012-0847
20 Aug 2012 — Heap-based buffer overflow in the avfilter_filter_samples function in libavfilter/avfilter.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) via a crafted media file. Un desbordamiento de búfer basado en memoria dinámica ('heap') en la función avfilter_filter_samples en libavfilter/avfilter.c en FFmpeg antes de v0.9.1 permite a atacantes remotos provocar una denegación de servicio (por caída de la aplicación) a través de un archivo debidamente modificado. • http://ffmpeg.org/security.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 0%CPEs: 43EXPL: 0CVE-2012-0857
https://notcve.org/view.php?id=CVE-2012-0857
20 Aug 2012 — Multiple buffer overflows in the get_qcx function in the J2K decoder (j2kdec.c) in libavcode in FFmpeg before 0.9.1 allow remote attackers to cause a denial of service (application crash) via unspecified vectors. Múltiples desbordamientos de búfer en la función get_qcs en J2K decoder (j2kdec.c) en libavcode en FFmpeg anterior a v0.9.1 permite a atacantes remotos causar una denegación de servicio (caída de la aplicación) a través de vectores no especificados. • http://ffmpeg.org/security.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.5EPSS: 1%CPEs: 1EXPL: 0CVE-2012-0848
https://notcve.org/view.php?id=CVE-2012-0848
20 Aug 2012 — Heap-based buffer overflow in the ws_snd_decode_frame function in libavcodec/ws-snd1.c in FFmpeg 0.9.1 allows remote attackers to cause a denial of service (application crash) via a crafted media file, related to an incorrect calculation, aka "wrong samples count." Un desbordamiento de búfer basado en memoria dinámica ('heap') en la función ws_snd_decode_frame en libavcodec/ws-snd1.c en FFmpeg v0.9.1 permite a atacantes remotos provocar una denegación de servicio (por caída de la aplicación) a través de un ... • http://ffmpeg.org/security.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.8EPSS: 2%CPEs: 37EXPL: 0CVE-2011-3951 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2011-3951
20 Aug 2012 — The dpcm_decode_frame function in dpcm.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted stereo stream in a media file. La función dpcm_decode_frame en dpcm.c en libavcodec de FFmpeg antes de v0.10 y en Libav v0.5.x antes de v0.5.9, v0.6.x antes de v0.6.6, v0.7.x antes de v0.7.6 y v0.8.x antes de v0.8.1 ... • http://ffmpeg.org • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.8EPSS: 2%CPEs: 62EXPL: 0CVE-2011-3952 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2011-3952
20 Aug 2012 — The decode_init function in kmvc.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large palette size in a KMVC encoded file. La función decode_init en kmvc.c en libavcodec de FFmpeg antes de v0.10 y en Libav v0.5.x antes de v0.5.9, v0.6.x antes de v0.6.6, v0.7.x antes de v0.7.6, y v0.8.x antes de v0.8.1 permite... • http://ffmpeg.org • CWE-20: Improper Input Validation •
CVSS: 6.5EPSS: 1%CPEs: 41EXPL: 0CVE-2011-3936 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2011-3936
20 Aug 2012 — The dv_extract_audio function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted DV file. La función dv_extract_audio en libavcodec de FFmpeg en v0.7.x antes de v0.7.12 y v0.8.x antes de y v0.8.11 y en Libav v0.5.x antes de v0.5.9, v0.6.x antes de v0.6.6, v0.7.x antes de v0.7.5 y v0.8.x a... • http://ffmpeg.org • CWE-20: Improper Input Validation •