| 0 |
| url |
VCID-1adb-u5yw-dfbu |
| vulnerability_id |
VCID-1adb-u5yw-dfbu |
| summary |
nsvdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (out-of-bounds read and write) via a crafted NSV file that triggers "use of uninitialized streams." |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-3940
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-1adb-u5yw-dfbu |
|
| 1 |
|
| 2 |
| url |
VCID-1pzs-kd7c-7yam |
| vulnerability_id |
VCID-1pzs-kd7c-7yam |
| summary |
Double free vulnerability in the Theora decoder in Google Chrome before 15.0.874.120 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted stream. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-3892
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-1pzs-kd7c-7yam |
|
| 3 |
| url |
VCID-1xtn-uw6f-bfe2 |
| vulnerability_id |
VCID-1xtn-uw6f-bfe2 |
| summary |
libavcodec/iff.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.2.x before 2.2.7, and 2.3.x before 2.3.2 allows remote attackers to have unspecified impact via a crafted iff image, which triggers an out-of-bounds array access, related to the rgb8 and rgbn formats. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2014-5272
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-1xtn-uw6f-bfe2 |
|
| 4 |
| url |
VCID-27zq-ucqs-j7ev |
| vulnerability_id |
VCID-27zq-ucqs-j7ev |
| summary |
Unspecified vulnerability in the avi_read_packet function in libavformat/avidec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an "out of array read" when a "packet is shrunk." |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-2788
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-27zq-ucqs-j7ev |
|
| 5 |
| url |
VCID-3fv9-2spy-vqa5 |
| vulnerability_id |
VCID-3fv9-2spy-vqa5 |
| summary |
The svq1_decode_frame function in the SVQ1 decoder (svq1dec.c) in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of service (memory corruption) via a crafted SVQ1 stream, related to "dimensions changed." |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-4579
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-3fv9-2spy-vqa5 |
|
| 6 |
|
| 7 |
|
| 8 |
| url |
VCID-4pgd-zsxt-mfef |
| vulnerability_id |
VCID-4pgd-zsxt-mfef |
| summary |
Integer signedness error in the decode_residual_inter function in cavsdec.c in libavcodec in FFmpeg before 0.7.4 and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (incorrect write operation and application crash) via an invalid bitstream in a Chinese AVS video (aka CAVS) file, a different vulnerability than CVE-2011-3362. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-3974
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-4pgd-zsxt-mfef |
|
| 9 |
| url |
VCID-4t3t-2rz4-jfe2 |
| vulnerability_id |
VCID-4t3t-2rz4-jfe2 |
| summary |
Unspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a different vulnerability than CVE-2012-2771, CVE-2012-2778, CVE-2012-2780, and CVE-2012-2781. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-2773
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-4t3t-2rz4-jfe2 |
|
| 10 |
| url |
VCID-4txv-uttd-nuay |
| vulnerability_id |
VCID-4txv-uttd-nuay |
| summary |
Multiple buffer overflows in vorbis_dec.c in the Vorbis decoder in FFmpeg, as used in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted WebM file, related to buffers for (1) the channel floor and (2) the channel residue. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-0480
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-4txv-uttd-nuay |
|
| 11 |
| url |
VCID-51b1-ad3r-ckc5 |
| vulnerability_id |
VCID-51b1-ad3r-ckc5 |
| summary |
Unspecified vulnerability in the decode_pic function in libavcodec/cavsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to "width/height changing in CAVS," a different vulnerability than CVE-2012-2784. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-2777
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-51b1-ad3r-ckc5 |
|
| 12 |
|
| 13 |
| url |
VCID-5hs4-5bae-eya9 |
| vulnerability_id |
VCID-5hs4-5bae-eya9 |
| summary |
Unspecified vulnerability in the decode_frame_mp3on4 function in libavcodec/mpegaudiodec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.5 has unknown impact and attack vectors related to a calculation that prevents a frame from being "large enough." |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-2797
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-5hs4-5bae-eya9 |
|
| 14 |
| url |
VCID-5th2-bcmk-akba |
| vulnerability_id |
VCID-5th2-bcmk-akba |
| summary |
FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a malformed WMV file. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2010-3908
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-5th2-bcmk-akba |
|
| 15 |
| url |
VCID-5x9b-6b42-qfhm |
| vulnerability_id |
VCID-5x9b-6b42-qfhm |
| summary |
The lpc_prediction function in libavcodec/alac.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted Apple Lossless Audio Codec (ALAC) data, related to a large nb_samples value. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2013-0856
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-5x9b-6b42-qfhm |
|
| 16 |
| url |
VCID-5xms-x1ac-k7dc |
| vulnerability_id |
VCID-5xms-x1ac-k7dc |
| summary |
The decode_mb function in libavcodec/error_resilience.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via vectors related to an uninitialized block index, which triggers an out-of-bounds write. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-3941
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-5xms-x1ac-k7dc |
|
| 17 |
| url |
VCID-6ng9-njwv-d3c6 |
| vulnerability_id |
VCID-6ng9-njwv-d3c6 |
| summary |
FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a malformed RealMedia file. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-0722
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-6ng9-njwv-d3c6 |
|
| 18 |
| url |
VCID-6v1k-j9nr-qqfs |
| vulnerability_id |
VCID-6v1k-j9nr-qqfs |
| summary |
Unspecified vulnerability in libavcodec/vp56.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, has unknown impact and attack vectors, related to "freeing the returned frame." |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-2783
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-6v1k-j9nr-qqfs |
|
| 19 |
| url |
VCID-6vv5-g9sw-37cg |
| vulnerability_id |
VCID-6vv5-g9sw-37cg |
| summary |
The decode_init function in kmvc.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large palette size in a KMVC encoded file. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-3952
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-6vv5-g9sw-37cg |
|
| 20 |
|
| 21 |
|
| 22 |
| url |
VCID-87ra-d4af-eyb1 |
| vulnerability_id |
VCID-87ra-d4af-eyb1 |
| summary |
Buffer overflow in the Sierra VMD decoder in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9 and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VMD file, related to corrupted streams. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-4364
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-87ra-d4af-eyb1 |
|
| 23 |
| url |
VCID-9dq2-9kwx-b7ct |
| vulnerability_id |
VCID-9dq2-9kwx-b7ct |
| summary |
Double free vulnerability in the mpeg_decode_frame function in libavcodec/mpeg12.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, has unknown impact and attack vectors, related to resetting the data size value. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-2803
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-9dq2-9kwx-b7ct |
|
| 24 |
| url |
VCID-a172-ptt9-sydg |
| vulnerability_id |
VCID-a172-ptt9-sydg |
| summary |
Unspecified vulnerability in the read_var_block_data function in libavcodec/alsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to a large order and an "out of array write in quant_cof." |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-2775
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-a172-ptt9-sydg |
|
| 25 |
|
| 26 |
| url |
VCID-an76-fn2u-uyem |
| vulnerability_id |
VCID-an76-fn2u-uyem |
| summary |
Heap-based buffer overflow in the vqa_decode_chunk function in the VQA codec (vqavideo.c) in libavcodec in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VQA media file in which the image size is not a multiple of the block size. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-0947
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-an76-fn2u-uyem |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
| url |
VCID-crd9-xskh-mffz |
| vulnerability_id |
VCID-crd9-xskh-mffz |
| summary |
Multiple unspecified vulnerabilities in FFmpeg 0.4.x through 0.6.x, as used in MPlayer 1.0 and other products, in Mandriva Linux 2009.0, 2010.0, and 2010.1; Corporate Server 4.0 (aka CS4.0); and Mandriva Enterprise Server 5 (aka MES5) have unknown impact and attack vectors, related to issues "originally discovered by Google Chrome developers." |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-2162
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-crd9-xskh-mffz |
|
| 32 |
| url |
VCID-cy5n-ub83-qbeh |
| vulnerability_id |
VCID-cy5n-ub83-qbeh |
| summary |
The msrle_decode_8_16_24_32 function in msrledec.c in libavcodec in FFmpeg through 1.1.3 does not properly determine certain end pointers, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted Microsoft RLE data. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2013-2496
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-cy5n-ub83-qbeh |
|
| 33 |
|
| 34 |
| url |
VCID-dru2-bhc9-k7h1 |
| vulnerability_id |
VCID-dru2-bhc9-k7h1 |
| summary |
The rle_unpack function in vmdav.c in libavcodec in FFmpeg git 20130328 through 20130501 does not properly use the bytestream2 API, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) via crafted RLE data. NOTE: the vendor has listed this as an issue fixed in 1.2.1, but the issue is actually in new code that was not shipped with the 1.2.1 release or any earlier release. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2013-3670
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-dru2-bhc9-k7h1 |
|
| 35 |
| url |
VCID-dwm3-vrxg-tqhd |
| vulnerability_id |
VCID-dwm3-vrxg-tqhd |
| summary |
The ape_read_header function in ape.c in libavformat in FFmpeg before 0.5.4, as used in MPlayer, VideoLAN VLC media player, and other products, allows remote attackers to cause a denial of service (application crash) via an APE (aka Monkey's Audio) file that contains a header but no frames. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-2161
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-dwm3-vrxg-tqhd |
|
| 36 |
|
| 37 |
|
| 38 |
| url |
VCID-e64u-t81k-afea |
| vulnerability_id |
VCID-e64u-t81k-afea |
| summary |
The ff_h264_decode_seq_parameter_set function in h264_ps.c in libavcodec in FFmpeg before 1.1.3 does not validate the relationship between luma depth and chroma depth, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted H.264 data. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2013-2277
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-e64u-t81k-afea |
|
| 39 |
| url |
VCID-evd6-m2tz-z7e5 |
| vulnerability_id |
VCID-evd6-m2tz-z7e5 |
| summary |
The dv_extract_audio function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted DV file. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-3936
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-evd6-m2tz-z7e5 |
|
| 40 |
|
| 41 |
| url |
VCID-fjed-1zbp-27ax |
| vulnerability_id |
VCID-fjed-1zbp-27ax |
| summary |
The avpriv_dv_produce_packet function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) and possibly execute arbitrary code via a crafted DV file. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-3929
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-fjed-1zbp-27ax |
|
| 42 |
|
| 43 |
| url |
VCID-g5k3-zebd-zqey |
| vulnerability_id |
VCID-g5k3-zebd-zqey |
| summary |
Unspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a different vulnerability than CVE-2012-2773, CVE-2012-2778, CVE-2012-2780, and CVE-2012-2781. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-2771
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-g5k3-zebd-zqey |
|
| 44 |
| url |
VCID-gajg-j3rt-cbdv |
| vulnerability_id |
VCID-gajg-j3rt-cbdv |
| summary |
The dpcm_decode_frame function in dpcm.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted stereo stream in a media file. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-3951
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-gajg-j3rt-cbdv |
|
| 45 |
| url |
VCID-gw2m-25yj-bbax |
| vulnerability_id |
VCID-gw2m-25yj-bbax |
| summary |
The iff_read_header function in iff.c in libavformat in FFmpeg through 1.1.3 does not properly handle data sizes for Interchange File Format (IFF) data during operations involving a CMAP chunk or a video codec, which allows remote attackers to cause a denial of service (integer overflow, out-of-bounds array access, and application crash) or possibly have unspecified other impact via a crafted header. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2013-2495
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-gw2m-25yj-bbax |
|
| 46 |
| url |
VCID-hc29-mw6t-qkax |
| vulnerability_id |
VCID-hc29-mw6t-qkax |
| summary |
Google Chrome before 15.0.874.120 does not properly implement the MKV and Vorbis media handlers, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-3893
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-hc29-mw6t-qkax |
|
| 47 |
|
| 48 |
| url |
VCID-j3yr-2vvu-yqfe |
| vulnerability_id |
VCID-j3yr-2vvu-yqfe |
| summary |
Unspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a different vulnerability than CVE-2012-2771, CVE-2012-2773, CVE-2012-2778, and CVE-2012-2781. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-2780
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-j3yr-2vvu-yqfe |
|
| 49 |
| url |
VCID-j6au-eyfy-ffdq |
| vulnerability_id |
VCID-j6au-eyfy-ffdq |
| summary |
Unspecified vulnerability in the ff_rv34_decode_frame function in libavcodec/rv34.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to "width/height changing with frame threading." |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-2772
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-j6au-eyfy-ffdq |
|
| 50 |
| url |
VCID-jscg-dwbj-e3ct |
| vulnerability_id |
VCID-jscg-dwbj-e3ct |
| summary |
Unspecified vulnerability in the decode_cell_data function in libavcodec/indeo3.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to an "out of picture write." |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-2776
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-jscg-dwbj-e3ct |
|
| 51 |
| url |
VCID-kbvy-cfu3-wyd9 |
| vulnerability_id |
VCID-kbvy-cfu3-wyd9 |
| summary |
Buffer overflow in mjpegbdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MJPEG-B file. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-3947
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-kbvy-cfu3-wyd9 |
|
| 52 |
| url |
VCID-keqe-y1h8-5bbd |
| vulnerability_id |
VCID-keqe-y1h8-5bbd |
| summary |
Buffer overflow in FFmpeg before 0.5.6, 0.6.x before 0.6.4, 0.7.x before 0.7.8, and 0.8.x before 0.8.8 allows remote attackers to execute arbitrary code via unspecified vectors. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-4351
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-keqe-y1h8-5bbd |
|
| 53 |
| url |
VCID-m8ud-nv4c-sbak |
| vulnerability_id |
VCID-m8ud-nv4c-sbak |
| summary |
MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file, as demonstrated by lol-vlc.aac; or (2) a malformed Ogg Media (OGM) file, as demonstrated by lol-ffplay.ogm, different vectors than CVE-2007-6718. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2008-4610
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-m8ud-nv4c-sbak |
|
| 54 |
| url |
VCID-mjn4-fzsw-43db |
| vulnerability_id |
VCID-mjn4-fzsw-43db |
| summary |
Unspecified vulnerability in the decode_pic function in libavcodec/cavsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to "width/height changing in CAVS," a different vulnerability than CVE-2012-2777. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-2784
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-mjn4-fzsw-43db |
|
| 55 |
|
| 56 |
|
| 57 |
| url |
VCID-nfqu-4xk2-qyfk |
| vulnerability_id |
VCID-nfqu-4xk2-qyfk |
| summary |
The decodeTonalComponents function in the Actrac3 codec (atrac3.c) in libavcodec in FFmpeg 0.7.x before 0.7.12, and 0.8.x before 0.8.11; and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (infinite loop and crash) and possibly execute arbitrary code via a large component count in an Atrac 3 file. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-0853
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-nfqu-4xk2-qyfk |
|
| 58 |
|
| 59 |
| url |
VCID-nqjy-5k88-t7c6 |
| vulnerability_id |
VCID-nqjy-5k88-t7c6 |
| summary |
Unspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a different vulnerability than CVE-2012-2771, CVE-2012-2773, CVE-2012-2780, and CVE-2012-2781. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-2778
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-nqjy-5k88-t7c6 |
|
| 60 |
| url |
VCID-p63m-csuz-rufd |
| vulnerability_id |
VCID-p63m-csuz-rufd |
| summary |
Unspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a different vulnerability than CVE-2012-2771, CVE-2012-2773, CVE-2012-2778, and CVE-2012-2780. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-2781
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-p63m-csuz-rufd |
|
| 61 |
| url |
VCID-p66m-9thc-wfcm |
| vulnerability_id |
VCID-p66m-9thc-wfcm |
| summary |
The (1) av_image_fill_pointers, (2) vp5_parse_coeff, and (3) vp6_parse_coeff functions in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allow remote attackers to cause a denial of service (out-of-bounds read) via a crafted VP5 or VP6 stream. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-4353
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-p66m-9thc-wfcm |
|
| 62 |
| url |
VCID-paut-vvtc-ekeb |
| vulnerability_id |
VCID-paut-vvtc-ekeb |
| summary |
Unspecified vulnerability in libavcodec/indeo3.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.5 has unknown impact and attack vectors, related to "reallocation code" and the luma height and width. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-2804
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-paut-vvtc-ekeb |
|
| 63 |
|
| 64 |
| url |
VCID-qrxr-gmkv-8udg |
| vulnerability_id |
VCID-qrxr-gmkv-8udg |
| summary |
The decode_slice_header function in libavcodec/h264.c in FFmpeg before 1.1.2 does not properly check when the pixel format changes, which allows remote attackers to have unspecified impact via crafted H.264 video data, related to an out-of-bounds array access. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2013-0867
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-qrxr-gmkv-8udg |
|
| 65 |
| url |
VCID-qua3-nryg-5qf5 |
| vulnerability_id |
VCID-qua3-nryg-5qf5 |
| summary |
The field_end function in libavcodec/h264.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted H.264 data, related to an SPS and slice mismatch and an out-of-bounds array access. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2013-0869
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-qua3-nryg-5qf5 |
|
| 66 |
|
| 67 |
| url |
VCID-qysw-kwux-h7gx |
| vulnerability_id |
VCID-qysw-kwux-h7gx |
| summary |
FFmpeg 0.5.x, as used in MPlayer and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed VC-1 file. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-0723
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-qysw-kwux-h7gx |
|
| 68 |
| url |
VCID-rfbz-dwza-1ufk |
| vulnerability_id |
VCID-rfbz-dwza-1ufk |
| summary |
Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving seek operations on video data. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-5150
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-rfbz-dwza-1ufk |
|
| 69 |
| url |
VCID-rhf7-phsf-9kec |
| vulnerability_id |
VCID-rhf7-phsf-9kec |
| summary |
The render_line function in the vorbis codec (vorbis.c) in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted Vorbis file, related to a large multiplier. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3893. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-0859
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-rhf7-phsf-9kec |
|
| 70 |
| url |
VCID-s79w-42fg-vfas |
| vulnerability_id |
VCID-s79w-42fg-vfas |
| summary |
The rpza_decode_stream function in libavcodec/rpza.c in FFmpeg before 2.1 does not properly maintain a pointer to pixel data, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Apple RPZA data. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2013-7009
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-s79w-42fg-vfas |
|
| 71 |
| url |
VCID-sdx4-hnfh-vqhc |
| vulnerability_id |
VCID-sdx4-hnfh-vqhc |
| summary |
The read_header function in libavcodec/ffv1dec.c in FFmpeg before 2.1 does not prevent changes to global parameters, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted FFV1 data. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2013-7011
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-sdx4-hnfh-vqhc |
|
| 72 |
| url |
VCID-te5b-gw2s-zkbb |
| vulnerability_id |
VCID-te5b-gw2s-zkbb |
| summary |
Heap-based buffer overflow in the Vorbis decoder in Google Chrome before 15.0.874.120 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted stream. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-3895
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-te5b-gw2s-zkbb |
|
| 73 |
|
| 74 |
| url |
VCID-unej-bq1d-g7cm |
| vulnerability_id |
VCID-unej-bq1d-g7cm |
| summary |
Integer signedness error in the decode_residual_block function in cavsdec.c in libavcodec in FFmpeg before 0.7.3 and 0.8.x before 0.8.2, and libav through 0.7.1, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Chinese AVS video (aka CAVS) file. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-3362
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-unej-bq1d-g7cm |
|
| 75 |
|
| 76 |
|
| 77 |
| url |
VCID-vs8a-tvkt-qbbs |
| vulnerability_id |
VCID-vs8a-tvkt-qbbs |
| summary |
Unspecified vulnerability in the decode_frame function in libavcodec/indeo5.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an invalid "gop header" and decoding in a "half initialized context." |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-2779
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-vs8a-tvkt-qbbs |
|
| 78 |
| url |
VCID-vzfn-jn1f-vuaw |
| vulnerability_id |
VCID-vzfn-jn1f-vuaw |
| summary |
Unspecified vulnerability in libavcodec/avs.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to dimensions and "out of array writes." |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-2801
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-vzfn-jn1f-vuaw |
|
| 79 |
|
| 80 |
| url |
VCID-xfa5-habt-jkek |
| vulnerability_id |
VCID-xfa5-habt-jkek |
| summary |
The ff_h264_decode_seq_parameter_set function in h264_ps.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted H.264 file, related to the chroma_format_idc value. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-0851
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-xfa5-habt-jkek |
|
| 81 |
| url |
VCID-xtuq-x9xp-9kd4 |
| vulnerability_id |
VCID-xtuq-x9xp-9kd4 |
| summary |
Buffer overflow in the vorbis_parse_setup_hdr_floors function in the Vorbis decoder in vorbisdec.c in libavcodec in FFmpeg through 1.1.3, as used in Google Chrome before 25.0.1364.97 on Windows and Linux and before 25.0.1364.99 on Mac OS X and other products, allows remote attackers to cause a denial of service (divide-by-zero error or out-of-bounds array access) or possibly have unspecified other impact via vectors involving a zero value for a bark map size. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2013-0894
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-xtuq-x9xp-9kd4 |
|
| 82 |
| url |
VCID-y27d-2qyy-e7eb |
| vulnerability_id |
VCID-y27d-2qyy-e7eb |
| summary |
libavcodec/vorbis_dec.c in the Vorbis decoder in FFmpeg 0.6.1 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted .ogg file, related to the vorbis_floor0_decode function. NOTE: this might overlap CVE-2011-0480. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2010-4704
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-y27d-2qyy-e7eb |
|
| 83 |
|
| 84 |
| url |
VCID-yr5j-7hmh-t3fu |
| vulnerability_id |
VCID-yr5j-7hmh-t3fu |
| summary |
The adpcm_decode_frame function in adpcm.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an ADPCM file with the number of channels not equal to two. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-0852
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-yr5j-7hmh-t3fu |
|
| 85 |
| url |
VCID-z2cr-ep3h-f3ga |
| vulnerability_id |
VCID-z2cr-ep3h-f3ga |
| summary |
The av_rescale_rnd function in the AVI demuxer in FFmpeg 0.5 allows remote attackers to cause a denial of service (crash) via a crafted AVI file that triggers a divide-by-zero error. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2009-4639
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-z2cr-ep3h-f3ga |
|
| 86 |
| url |
VCID-zm3n-5c47-hfg4 |
| vulnerability_id |
VCID-zm3n-5c47-hfg4 |
| summary |
The VC-1 decoding functionality in FFmpeg before 0.5.4, as used in MPlayer and other products, does not properly restrict read operations, which allows remote attackers to have an unspecified impact via a crafted VC-1 file, a related issue to CVE-2011-0723. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-2160
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-zm3n-5c47-hfg4 |
|
| 87 |
| url |
VCID-zxyr-u9x8-g7c9 |
| vulnerability_id |
VCID-zxyr-u9x8-g7c9 |
| summary |
cavsdec.c in libavcodec in FFmpeg before 0.7.4 and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (incorrect write operation and application crash) via an invalid bitstream in a Chinese AVS video (aka CAVS) file, related to the decode_residual_block, check_for_slice, and cavs_decode_frame functions, a different vulnerability than CVE-2011-3362. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-3973
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-zxyr-u9x8-g7c9 |
|