CVSS: 10.0EPSS: 1%CPEs: 13EXPL: 0CVE-2014-3984
https://notcve.org/view.php?id=CVE-2014-3984
Multiple unspecified vulnerabilities in Libav before 0.8.12 allow remote attackers to have unknown impact and vectors. Múltiples vulnerabilidades no especificadas en Libav anterior a 0.8.12 permiten a atacantes remotos tener impacto y vectores desconocidos. • http://git.libav.org/?p=libav.git%3Ba=blob%3Bf=Changelog%3Bhb=refs/tags/v0.8.12 http://libav.org/news.html http://secunia.com/advisories/59032 http://secunia.com/advisories/59045 http://www.debian.org/security/2014/dsa-2947 http://www.ubuntu.com/usn/USN-2244-1 •
CVSS: 10.0EPSS: 1%CPEs: 88EXPL: 0CVE-2012-5144
https://notcve.org/view.php?id=CVE-2012-5144
Google Chrome before 23.0.1271.97, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, do not properly perform AAC decoding, which allows remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via vectors related to "an off-by-one overwrite when switching to LTP profile from MAIN." Google Chrome antes 23.0.1271.97 no realiza correctamente la decodificación AAC, que permite a atacantes remotos provocar una denegación de servicio (corrupción de pila de memoria) o posiblemente tener un impacto no especificado a través de vectores desconocidos. • http://googlechromereleases.blogspot.com/2012/12/stable-channel-update.html http://libav.org/releases/libav-0.7.7.changelog http://libav.org/releases/libav-0.8.5.changelog http://lists.opensuse.org/opensuse-updates/2012-12/msg00073.html http://www.ubuntu.com/usn/USN-1705-1 https://code.google.com/p/chromium/issues/detail?id=161639 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16007 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 0%CPEs: 68EXPL: 0CVE-2012-2772
https://notcve.org/view.php?id=CVE-2012-2772
Unspecified vulnerability in the ff_rv34_decode_frame function in libavcodec/rv34.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to "width/height changing with frame threading." Vulnerabilidad no especificada en la función ff_rv34_decode_frame en libavcodec/rv34.c en FFmpeg anterior a v0.11 tiene un impacto desconocido y vectores de ataque, relacionado con "width/height cambiando con el marco threading". • http://ffmpeg.org/security.html http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=cb7190cd2c691fd93e4d3664f3fce6c19ee001dd http://libav.org/releases/libav-0.7.7.changelog http://libav.org/releases/libav-0.8.4.changelog http://secunia.com/advisories/50468 http://secunia.com/advisories/51257 http://www.mandriva.com/security/advisories?name=MDVSA-2013:079 http://www.openwall.com/lists/oss-security/2012/08/31/3 http://www.openwall.com/lists/oss-security/2012/09/02/4 http •
CVSS: 10.0EPSS: 0%CPEs: 68EXPL: 0CVE-2012-2775
https://notcve.org/view.php?id=CVE-2012-2775
Unspecified vulnerability in the read_var_block_data function in libavcodec/alsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to a large order and an "out of array write in quant_cof." Una vulnerabilidad no especificada en la función read_var_block_data en libavcodec/alsdec.c en FFmpeg antes de v0.11 tiene un impacto y vectores de ataque desconocidos. Se trata de un problema relacionado con un pedido grande y una "escritura fuera de matriz en quant_cof". • http://ffmpeg.org/security.html http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=9d3032b960ae03066c008d6e6774f68b17a1d69d http://libav.org/releases/libav-0.7.7.changelog http://libav.org/releases/libav-0.8.4.changelog http://secunia.com/advisories/50468 http://secunia.com/advisories/51257 http://www.mandriva.com/security/advisories?name=MDVSA-2013:079 http://www.openwall.com/lists/oss-security/2012/08/31/3 http://www.openwall.com/lists/oss-security/2012/09/02/4 http •
CVSS: 10.0EPSS: 0%CPEs: 59EXPL: 0CVE-2012-2776
https://notcve.org/view.php?id=CVE-2012-2776
Unspecified vulnerability in the decode_cell_data function in libavcodec/indeo3.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to an "out of picture write." Vulnerabilidad no especificada en la función decode_cell_data en libavcodec/indeo3.c en FFmpeg anterior a v0.11 tiene un impacto desconocido y vectores de ataque, relacionado con un "fuera de grabación de imágenes." • http://ffmpeg.org/security.html http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=ba775a54bc2136ec5da85385a923b05ee6fab159 http://libav.org/releases/libav-0.8.4.changelog http://secunia.com/advisories/50468 http://secunia.com/advisories/51257 http://www.mandriva.com/security/advisories?name=MDVSA-2013:079 http://www.openwall.com/lists/oss-security/2012/08/31/3 http://www.openwall.com/lists/oss-security/2012/09/02/4 http://www.securityfocus.com/bid/55355 •