Browse CVEs

MEDIUM 6.8 CVE-2011-3952 The decode_init function in kmvc.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0… Ffmpeg after 0.9.1 Fix from $1,6002012-08-20 MEDIUM 6.8 CVE-2012-0851 The ff_h264_decode_seq_parameter_set function in h264_ps.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, … Ffmpeg after 0.9 Fix from $1,6002012-08-20 MEDIUM 6.8 CVE-2012-0852 The adpcm_decode_frame function in adpcm.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7… Ffmpeg after 0.9 Fix from $1,6002012-08-20 MEDIUM 6.8 CVE-2012-0853 The decodeTonalComponents function in the Actrac3 codec (atrac3.c) in libavcodec in FFmpeg 0.7.x before 0.7.12, and 0.8.x before 0.8.11; and in Libav… Ffmpeg No fix yet Fix from $1,6002012-08-20 MEDIUM 6.8 CVE-2012-0858 The Shorten codec (shorten.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.… Ffmpeg Mitigation only Fix from $1,6002012-08-20 MEDIUM 6.8 CVE-2012-0859 The render_line function in the vorbis codec (vorbis.c) in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (ap… Ffmpeg after 0.9 Fix from $1,6002012-08-20 MEDIUM 6.8 CVE-2011-3929 The avpriv_dv_produce_packet function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x befo… Ffmpeg Mitigation only Fix from $1,6002012-08-20 MEDIUM 6.8 CVE-2011-4031 Integer underflow in the asfrtp_parse_packet function in libavformat/rtpdec_asf.c in FFmpeg before 0.8.3 allows remote attackers to execute arbitrary… Ffmpeg 0.8.3+ Fix from $1,6002012-05-09 MEDIUM 6.8 CVE-2011-3362 Integer signedness error in the decode_residual_block function in cavsdec.c in libavcodec in FFmpeg before 0.7.3 and 0.8.x before 0.8.2, and libav th… Ffmpeg after 0.7.2 Fix from $1,6002011-10-02 MEDIUM 5.0 CVE-2011-3973 cavsdec.c in libavcodec in FFmpeg before 0.7.4 and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (incorrect write operation… Ffmpeg after 0.7.3 Fix from $1,6002011-10-02 MEDIUM 5.0 CVE-2011-3974 Integer signedness error in the decode_residual_inter function in cavsdec.c in libavcodec in FFmpeg before 0.7.4 and 0.8.x before 0.8.3 allows remote… Ffmpeg after 0.7.3 Fix from $1,6002011-10-02 HIGH 9.3 CVE-2011-3504EPSS 6% The Matroska format decoder in FFmpeg before 0.8.3 does not properly allocate memory, which allows remote attackers to execute arbitrary code via a c… Ffmpeg after 0.8.0 Fix from $1,9502011-09-29 MEDIUM 6.8 CVE-2011-1931 sp5xdec.c in the Sunplus SP5X JPEG decoder in libavcodec in FFmpeg before 0.6.3 and libav through 0.6.2, as used in VideoLAN VLC media player 1.1.9 a… Ffmpeg after 1.1.9 Fix from $1,6002011-07-07 HIGH 9.3 CVE-2011-2160 The VC-1 decoding functionality in FFmpeg before 0.5.4, as used in MPlayer and other products, does not properly restrict read operations, which allo… Ffmpeg after 0.5.3 Fix from $1,9502011-05-20 MEDIUM 6.8 CVE-2010-3908 FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service (memory corruption and application c… Ffmpeg after 0.5.3 Fix from $1,6002011-05-20 MEDIUM 6.8 CVE-2011-0722 FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service (heap memory corruption and applicat… Ffmpeg after 0.5.3 Fix from $1,6002011-05-20 MEDIUM 6.8 CVE-2011-0723 FFmpeg 0.5.x, as used in MPlayer and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arb… Ffmpeg Mitigation only Fix from $1,6002011-05-20 HIGH 9.3 CVE-2010-4705 Integer overflow in the vorbis_residue_decode_internal function in libavcodec/vorbis_dec.c in the Vorbis decoder in FFmpeg, possibly 0.6, has unspeci… Ffmpeg Mitigation only Fix from $1,9502011-01-22 MEDIUM 6.8 CVE-2010-3429 flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a c… Libavcodec after 1.0 Fix from $1,6002010-09-30 HIGH 10.0 CVE-2009-4633EPSS 8% vorbis_dec.c in FFmpeg 0.5 uses an assignment operator when a comparison operator was intended, which might allow remote attackers to cause a denial … Ffmpeg No fix yet Fix from $1,9502010-02-10 HIGH 10.0 CVE-2009-4634EPSS 7% Multiple integer underflows in FFmpeg 0.5 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted file … Ffmpeg No fix yet Fix from $1,9502010-02-10 HIGH 10.0 CVE-2009-4637EPSS 17% FFmpeg 0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger a stack-… Ffmpeg No fix yet Fix from $1,9502010-02-10 HIGH 9.3 CVE-2009-4631EPSS 5% Off-by-one error in the VP3 decoder (vp3.c) in FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code vi… Ffmpeg No fix yet Fix from $1,9502010-02-10 HIGH 9.3 CVE-2009-4635EPSS 8% FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted MOV container with improperly order… Ffmpeg No fix yet Fix from $1,9502010-02-10 MEDIUM 5.8 CVE-2009-4632 oggparsevorbis.c in FFmpeg 0.5 does not properly perform certain pointer arithmetic, which might allow remote attackers to obtain sensitive memory co… Ffmpeg No fix yet Fix from $1,6002010-02-10 HIGH 10.0 CVE-2008-4866 Multiple buffer overflows in libavformat/utils.c in FFmpeg 0.4.9 before r14715, as used by MPlayer, allow context-dependent attackers to have an unkn… Ffmpeg after 0.4.9 Fix from $1,9502008-11-01 HIGH 10.0 CVE-2008-4867 Buffer overflow in libavcodec/dca.c in FFmpeg 0.4.9 before r14917, as used by MPlayer, allows context-dependent attackers to have an unknown impact v… Ffmpeg after 0.4.9 Fix from $1,9502008-11-01 HIGH 10.0 CVE-2008-4868 Unspecified vulnerability in the avcodec_close function in libavcodec/utils.c in FFmpeg 0.4.9 before r14787, as used by MPlayer, has unknown impact a… Ffmpeg after 0.4.9 Fix from $1,9502008-11-01 HIGH 10.0 CVE-2008-4869 FFmpeg 0.4.9, as used by MPlayer, allows context-dependent attackers to cause a denial of service (memory consumption) via unknown vectors, aka a "Tc… Ffmpeg after 0.4.9 Fix from $1,9502008-11-01 HIGH 9.3 CVE-2008-3162EPSS 9% Stack-based buffer overflow in the str_read_packet function in libavformat/psxstr.c in FFmpeg before r13993 allows remote attackers to cause a denial… Ffmpeg Mitigation only Fix from $1,9502008-07-14