CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2016-7555 – Gentoo Linux Security Advisory 201701-71
https://notcve.org/view.php?id=CVE-2016-7555
23 Dec 2016 — The avi_read_header function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to memory leak when decoding an AVI file that has a crafted "strh" structure. La función avi_read_header en libavformat/avidec.c en FFmpeg en versiones anteriores a 3.1.4 es vulnerable a una perdida de memoria cuando decodifica un archivo AVI que tiene uns estructura "strh" manipulada. Multiple vulnerabilities have been found in FFmpeg, the worst of which may allow remote attackers to cause a Denial of Service conditio... • http://www.openwall.com/lists/oss-security/2016/10/08/1 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2016-7562 – Gentoo Linux Security Advisory 201701-71
https://notcve.org/view.php?id=CVE-2016-7562
23 Dec 2016 — The ff_draw_pc_font function in libavcodec/cga_data.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service (buffer overflow) via a crafted AVI file. La función ff_draw_pc_font en libavcodec/cga_data.c en FFmpeg en versiones anteriores a 3.1.4 permite a atacantes remotos provocar una denegación de servicio (desbordamiento de búfer) a través de un archivo AVI manipulado. Multiple vulnerabilities have been found in FFmpeg, the worst of which may allow remote attackers to cause a Denial o... • http://www.openwall.com/lists/oss-security/2016/10/08/1 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2016-7122 – Gentoo Linux Security Advisory 201701-71
https://notcve.org/view.php?id=CVE-2016-7122
23 Dec 2016 — The avi_read_nikon function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to infinite loop when it decodes an AVI file that has a crafted 'nctg' structure. La función avi_read_nikon en libavformat/avidec.c en FFmpeg en versiones anteriores a 3.1.4 es vulnerable al bucle infinito cuando decodifica un archivo AVI que tiene una estructura 'nctg' manipulada. Multiple vulnerabilities have been found in FFmpeg, the worst of which may allow remote attackers to cause a Denial of Service condition. Ve... • http://www.openwall.com/lists/oss-security/2016/10/08/1 • CWE-399: Resource Management Errors •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2016-9561
https://notcve.org/view.php?id=CVE-2016-9561
23 Dec 2016 — The che_configure function in libavcodec/aacdec_template.c in FFmpeg before 3.2.1 allows remote attackers to cause a denial of service (allocation of huge memory, and being killed by the OS) via a crafted MOV file. La función che_configure en libavcodec/aacdec_template.c en FFmpeg en versiones anteriores a 3.2.1 permite a atacantes remotos provocar una denegación de servicio (gran asignación de memoria y siendo aniquilado por el SO) a través de un archivo MOV manipulado. • http://www.openwall.com/lists/oss-security/2016/12/08/1 • CWE-399: Resource Management Errors •
CVSS: 7.5EPSS: 3%CPEs: 1EXPL: 0CVE-2016-6920 – ffmpeg 3.1.2 Heap Overflow
https://notcve.org/view.php?id=CVE-2016-6920
07 Sep 2016 — Heap-based buffer overflow in the decode_block function in libavcodec/exr.c in FFmpeg before 3.1.3 allows remote attackers to cause a denial of service (application crash) via vectors involving tile positions. Desbordamiento de búfer basado en memoria dinámica en la función decode_block en libavcodec/exr.c en FFmpeg en versiones anteriores a 3.1.3 permite a atacantes provocar una denegación de servicio (caída de la aplicación) a través de vectores que implican posiciones de baldosa. ffmpeg versions 3.1.2 an... • http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit%3Bh=79f52a0dbd484aad111e4bf4a4f7047c7ceb6137 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.8EPSS: 0%CPEs: 4EXPL: 0CVE-2016-2326 – Gentoo Linux Security Advisory 201705-08
https://notcve.org/view.php?id=CVE-2016-2326
12 Feb 2016 — Integer overflow in the asf_write_packet function in libavformat/asfenc.c in FFmpeg before 2.8.5 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PTS (aka presentation timestamp) value in a .mov file. Desbordamiento de entero en la función asf_write_packet en libavformat/asfenc.c en FFmpeg en versiones anteriores a 2.8.5 permite a atacantes remotos provocar una denegación de servicio o posiblemente tener otro impacto no especificado a través de un ... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=7c0b84d89911b2035161f5ef51aafbfcc84aa9e2 • CWE-190: Integer Overflow or Wraparound •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2016-2327 – Gentoo Linux Security Advisory 201606-09
https://notcve.org/view.php?id=CVE-2016-2327
12 Feb 2016 — libavcodec/pngenc.c in FFmpeg before 2.8.5 uses incorrect line sizes in certain row calculations, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted .avi file, related to the apng_encode_frame and encode_apng functions. libavcodec/pngenc.c en FFmpeg en versiones anteriores a 2.8.5 utiliza tamaños de línea incorrectos en ciertos cálculos de fila, lo que podría permitir a atacantes remotos provocar una denegación de s... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=7ec9c5ce8a753175244da971fed9f1e25aef7971 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2016-2328 – Gentoo Linux Security Advisory 201606-09
https://notcve.org/view.php?id=CVE-2016-2328
12 Feb 2016 — libswscale/swscale_unscaled.c in FFmpeg before 2.8.6 does not validate certain height values, which allows remote attackers to cause a denial of service (out-of-bounds array read access) or possibly have unspecified other impact via a crafted .cine file, related to the bayer_to_rgb24_wrapper and bayer_to_yv12_wrapper functions. libswscale/swscale_unscaled.c en FFmpeg en versiones anteriores a 2.8.6 no valida correctamente valores de anchura, lo que podría permitir a atacantes remotos provocar una denegación... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=757248ea3cd917a7755cb15f817a9b1f15578718 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 0CVE-2016-2329 – Gentoo Linux Security Advisory 201606-09
https://notcve.org/view.php?id=CVE-2016-2329
12 Feb 2016 — libavcodec/tiff.c in FFmpeg before 2.8.6 does not properly validate RowsPerStrip values and YCbCr chrominance subsampling factors, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted TIFF file, related to the tiff_decode_tag and decode_frame functions. libavcodec/tiff.c en FFmpeg en versiones anteriores a 2.8.6 no valida correctamente valores RowsPerStrip y factores de submuestreo de crominancia YCbCr, lo que podría ... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=89f464e9c229006e16f6bb5403c5529fdd0a9edd • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 0CVE-2016-2330 – Gentoo Linux Security Advisory 201606-09
https://notcve.org/view.php?id=CVE-2016-2330
12 Feb 2016 — libavcodec/gif.c in FFmpeg before 2.8.6 does not properly calculate a buffer size, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted .tga file, related to the gif_image_write_image, gif_encode_init, and gif_encode_close functions. libavcodec/gif.c en FFmpeg en versiones anteriores a 2.8.6 no calcula correctamente un tamaño de buffer, lo que podría permitir a atacantes remotos provocar una denegación de servicio (ac... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=03d83ba34b2070878909eae18dfac0f519503777 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •