CVSS: 10.0EPSS: 0%CPEs: 68EXPL: 0CVE-2012-2801
https://notcve.org/view.php?id=CVE-2012-2801
Unspecified vulnerability in libavcodec/avs.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to dimensions and "out of array writes." Vulnerabilidad no especificada en libavcodec/avs.c en FFmpeg antes de v0.11 tiene un impacto desconocido y vectores de ataque, en relación a las dimensiones y "escrituras fuera de la matriz" • http://ffmpeg.org/security.html http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=1df49142bab1b7bccd11392aa9e819e297d21a6e http://libav.org/releases/libav-0.7.7.changelog http://libav.org/releases/libav-0.8.4.changelog http://libav.org/releases/libav-0.8.5.changelog http://secunia.com/advisories/50468 http://secunia.com/advisories/51257 http://www.mandriva.com/security/advisories?name=MDVSA-2013:079 http://www.openwall.com/lists/oss-security/2012/08/31/3 http://www •
CVSS: 10.0EPSS: 0%CPEs: 54EXPL: 0CVE-2012-2785
https://notcve.org/view.php?id=CVE-2012-2785
Multiple unspecified vulnerabilities in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 have unknown impact and attack vectors, related to (1) "some subframes only encode some channels" or (2) a large order value. Múltiples vulnerabilidades no especificadas en libavcodec/wmalosslessdec.c en FFmpeg antes de v0.11 tienen un impacto y vectores de ataque desconocidos. Se trata de un problema relacionado con (1) "algunas subtramas que sólo codifican algunos canales" o (2) un valor de 'order' demasiado largo. • http://ffmpeg.org/security.html http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=326f7a68bbd429c63fd2f19f4050658982b5b081 http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=d462949974668ffb013467d12dc4934b9106fe19 http://secunia.com/advisories/50468 http://www.openwall.com/lists/oss-security/2012/08/31/3 http://www.openwall.com/lists/oss-security/2012/09/02/4 http://www.securityfocus.com/bid/55355 •
CVSS: 5.0EPSS: 1%CPEs: 54EXPL: 0CVE-2012-2774
https://notcve.org/view.php?id=CVE-2012-2774
The ff_MPV_frame_start function in libavcodec/mpegvideo.c in FFmpeg before 0.11 allows remote attackers to cause a denial of service (memory corruption) via unspecified vectors, related to starting "a frame outside SETUP state." La función ff_MPV_frame_start en libavcodec/mpegvideo.c en FFmpeg anterior a v0.11 permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria) a través de vectores no especificados, se refieren a iniciar "un marco fuera de estado de configuración." • http://ffmpeg.org/security.html http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=59a4b73531428d2f420b4dad545172c8483ced0f http://secunia.com/advisories/50468 http://www.openwall.com/lists/oss-security/2012/08/31/3 http://www.openwall.com/lists/oss-security/2012/09/02/4 http://www.securityfocus.com/bid/55355 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 1%CPEs: 5EXPL: 0CVE-2005-4048
https://notcve.org/view.php?id=CVE-2005-4048
Heap-based buffer overflow in the avcodec_default_get_buffer function (utils.c) in FFmpeg libavcodec 0.4.9-pre1 and earlier, as used in products such as (1) mplayer, (2) xine-lib, (3) Xmovie, and (4) GStreamer, allows remote attackers to execute arbitrary commands via small PNG images with palettes. • http://article.gmane.org/gmane.comp.video.ffmpeg.devel/26558 http://cvs.freedesktop.org/gstreamer/gst-ffmpeg/ChangeLog?rev=1.239&view=markup http://secunia.com/advisories/17892 http://secunia.com/advisories/18066 http://secunia.com/advisories/18087 http://secunia.com/advisories/18107 http://secunia.com/advisories/18400 http://secunia.com/advisories/18739 http://secunia.com/advisories/18746 http://secunia.com/advisories/19114 http://secunia.com/advisories/19192 http://secunia&# • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •