Page 7 of 322 results (0.022 seconds)

CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2017-14767

https://notcve.org/view.php?id=CVE-2017-14767

27 Sep 2017 — The sdp_parse_fmtp_config_h264 function in libavformat/rtpdec_h264.c in FFmpeg before 3.3.4 mishandles empty sprop-parameter-sets values, which allows remote attackers to cause a denial of service (heap buffer overflow) or possibly have unspecified other impact via a crafted sdp file. La función sdp_parse_fmtp_config_h264 en libavformat/rtpdec_h264.c en FFmpeg en versiones anteriores a la 3.3.4 gestiona incorrectamente los valores sprop-paremeter-sets vacíos, lo que permite que los atacantes causen una dene... • http://www.debian.org/security/2017/dsa-3996 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2013-0870

https://notcve.org/view.php?id=CVE-2013-0870

28 Aug 2017 — The 'vp3_decode_frame' function in FFmpeg 1.1.4 moves threads check out of header packet type check. La función vp3_decode_frame en FFmpeg 1.1.4 no chequea los hilos cuando se chequea el tipo de paquete de cabecera. • http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=14c8ee00ffd9d45e6e0c6f11a957ce7e56f7eb3a •

CVSS: 6.5EPSS: 8%CPEs: 2EXPL: 1

CVE-2017-9608 – Debian Security Advisory 3957-1

https://notcve.org/view.php?id=CVE-2017-9608

28 Aug 2017 — The dnxhd decoder in FFmpeg before 3.2.6, and 3.3.x before 3.3.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted mov file. El decodificador dnxhd en FFmpeg, en versiones anteriores a la 3.2.6 y versiones 3.3.x anteriores a la 3.3.3, permite que atacantes remotos provoquen una denegación de servicio (desreferencia de puntero NULL) mediante un archivo mov manipulado. Several vulnerabilities have been discovered in FFmpeg, a multimedia player, server and encoder. T... • https://github.com/LaCinquette/practice-22-23 • CWE-476: NULL Pointer Dereference •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2017-11719 – Debian Security Advisory 3957-1

https://notcve.org/view.php?id=CVE-2017-11719

28 Jul 2017 — The dnxhd_decode_header function in libavcodec/dnxhddec.c in FFmpeg 3.0 through 3.3.2 allows remote attackers to cause a denial of service (out-of-array access) or possibly have unspecified other impact via a crafted DNxHD file. La función dnxhd_decode_header en el archivo libavcodec/dnxhddec.c en FFmpeg versión 3.0 hasta la versión 3.3.2, permite a los atacantes remotos causar una denegación de servicio (acceso fuera de la matriz) o posiblemente tener otro impacto no especificado por medio de un archivo DN... • http://www.debian.org/security/2017/dsa-3957 • CWE-125: Out-of-bounds Read •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2017-11399 – Debian Security Advisory 3957-1

https://notcve.org/view.php?id=CVE-2017-11399

17 Jul 2017 — Integer overflow in the ape_decode_frame function in libavcodec/apedec.c in FFmpeg 2.4 through 3.3.2 allows remote attackers to cause a denial of service (out-of-array access and application crash) or possibly have unspecified other impact via a crafted APE file. Un desbordamiento de enteros en la función ape_decode_frame en el archivo libavcodec/apedec.c en FFmpeg versión 2.4 hasta la versión 3.3.2, permite a los atacantes remotos causar una denegación de servicio (acceso fuera de la matriz y bloqueo de ap... • http://www.debian.org/security/2017/dsa-3957 • CWE-125: Out-of-bounds Read •

CVSS: 8.8EPSS: 1%CPEs: 1EXPL: 0

CVE-2017-9990

https://notcve.org/view.php?id=CVE-2017-9990

28 Jun 2017 — Stack-based buffer overflow in the color_string_to_rgba function in libavcodec/xpmdec.c in FFmpeg 3.3 before 3.3.1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file. Buffer overflow basado en pila -stack- en la función color_string_to_rgba en el archivo libavcodec/xpmdec.c en Ffmpeg 3.3.x en sus versiones anteriores a la 3.3.1 permite a un atacante remoto causar una denegación de servicio (caída de la aplicación) u otro posi... • http://www.securityfocus.com/bid/99313 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.8EPSS: 0%CPEs: 23EXPL: 0

CVE-2017-9991

https://notcve.org/view.php?id=CVE-2017-9991

28 Jun 2017 — Heap-based buffer overflow in the xwd_decode_frame function in libavcodec/xwddec.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file. Buffer overflow en la memoria dinámica -heap- en la función xwd_decode_frame en el archivo libavcodec/xwddec.c en Ffmpeg en sus versiones anteriores a la 2.8.12, 3.0.x en sus versiones a... • http://www.securityfocus.com/bid/99316 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 8.8EPSS: 0%CPEs: 6EXPL: 0

CVE-2017-9992 – Debian Security Advisory 4012-1

https://notcve.org/view.php?id=CVE-2017-9992

28 Jun 2017 — Heap-based buffer overflow in the decode_dds1 function in libavcodec/dfa.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file. Buffer overflow en la memoria dinámica -heap- en la función decode_dds1 en el archivo libavcodec/dfa.c en Ffmpeg en sus versiones anteriores a la 2.8.12, 3.0.x en sus versiones anteriores a la 3... • http://www.debian.org/security/2017/dsa-4012 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.8EPSS: 0%CPEs: 6EXPL: 0

CVE-2017-9994

https://notcve.org/view.php?id=CVE-2017-9994

28 Jun 2017 — libavcodec/webp.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not ensure that pix_fmt is set, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file, related to the vp8_decode_mb_row_no_filter and pred8x8_128_dc_8_c functions. El archivo libavcodec/webp.c en Ffmpeg en sus versiones anteriores a 2.8.12, 3.0.x en sus versiones ... • http://www.securityfocus.com/bid/99317 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.8EPSS: 0%CPEs: 34EXPL: 0

CVE-2017-9996

https://notcve.org/view.php?id=CVE-2017-9996

28 Jun 2017 — The cdxl_decode_frame function in libavcodec/cdxl.c in FFmpeg 2.8.x before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not exclude the CHUNKY format, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file. La función cdxl_decode_frame del archivo libavcodec/cdxl.c en Ffmpeg 2.8.x en sus versiones anteriores a 2.8.12, 3.0.x en sus versiones an... • http://www.securityfocus.com/bid/99323 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •