Search for packages
Package details: pkg:deb/ubuntu/libav@4:0.6.6-0ubuntu0.11.04.1
purl pkg:deb/ubuntu/libav@4:0.6.6-0ubuntu0.11.04.1
Next non-vulnerable version 6:9.20-0ubuntu0.14.04.1
Latest non-vulnerable version 6:9.20-0ubuntu0.14.04.1
Risk 4.0
Vulnerabilities affecting this package (8)
Vulnerability Summary Fixed by
VCID-2ut6-x9bk-aaas
Aliases:
CVE-2014-8543
libavcodec/mmvideo.c in FFmpeg before 2.4.2 does not consider all lines of HHV Intra blocks during validation of image height, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted MM video data.
6:9.18-0ubuntu0.14.04.1
Affected by 1 other vulnerability.
VCID-3tb5-cz2m-aaad
Aliases:
CVE-2014-8544
libavcodec/tiff.c in FFmpeg before 2.4.2 does not properly validate bits-per-pixel fields, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted TIFF data.
6:9.18-0ubuntu0.14.04.1
Affected by 1 other vulnerability.
VCID-8se2-jdth-aaaj
Aliases:
CVE-2014-9604
libavcodec/utvideodec.c in FFmpeg before 2.5.2 does not check for a zero value of a slice height, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Ut Video data, related to the (1) restore_median and (2) restore_median_il functions.
6:9.18-0ubuntu0.14.04.1
Affected by 1 other vulnerability.
VCID-9q4u-vc5g-aaac
Aliases:
CVE-2014-8547
libavcodec/gifdec.c in FFmpeg before 2.4.2 does not properly compute image heights, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted GIF data.
6:9.18-0ubuntu0.14.04.1
Affected by 1 other vulnerability.
VCID-9z3v-fyrt-aaab
Aliases:
CVE-2014-8542
libavcodec/utils.c in FFmpeg before 2.4.2 omits a certain codec ID during enforcement of alignment, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted JV data.
6:9.18-0ubuntu0.14.04.1
Affected by 1 other vulnerability.
VCID-h7zx-7n98-aaap
Aliases:
CVE-2014-8548
Off-by-one error in libavcodec/smc.c in FFmpeg before 2.4.2 allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted Quicktime Graphics (aka SMC) video data.
6:9.18-0ubuntu0.14.04.1
Affected by 1 other vulnerability.
VCID-sg74-9vdh-aaac
Aliases:
CVE-2014-4609
Integer overflow in the get_len function in libavutil/lzo.c in Libav before 0.8.13, 9.x before 9.14, and 10.x before 10.2 allows remote attackers to execute arbitrary code via a crafted Literal Run.
6:9.14-0ubuntu0.14.04.1
Affected by 7 other vulnerabilities.
VCID-v438-fbd1-aaaj
Aliases:
CVE-2014-7933
Use-after-free vulnerability in the matroska_read_seek function in libavformat/matroskadec.c in FFmpeg before 2.5.1, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Matroska file that triggers improper maintenance of tracks data.
6:9.20-0ubuntu0.14.04.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version