Browse CVEs

MEDIUM 6.8 CVE-2011-3944 The smacker_decode_header_tree function in libavcodec/smacker.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via craft… Ffmpeg after 0.9.1 Fix from $1,6002013-12-09 HIGH 7.5 CVE-2011-3941 The decode_mb function in libavcodec/error_resilience.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via vectors relat… Ffmpeg after 0.9.1 Fix from $1,9502013-12-09 MEDIUM 6.8 CVE-2011-3935 The codec_get_buffer function in ffmpeg.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via vectors related to a crafte… Ffmpeg after 0.9.1 Fix from $1,6002013-12-09 MEDIUM 6.8 CVE-2011-3934 Double free vulnerability in the vp3_update_thread_context function in libavcodec/vp3.c in FFmpeg before 0.10 allows remote attackers to have an unsp… Ffmpeg after 0.9.1 Fix from $1,6002013-12-09 HIGH 9.3 CVE-2013-0859 The add_doubles_metadata function in libavcodec/tiff.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a negative or z… Ffmpeg after 1.0 Fix from $1,9502013-12-07 HIGH 9.3 CVE-2013-0844 Off-by-one error in the adpcm_decode_frame function in libavcodec/adpcm.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impac… Ffmpeg after 1.0.3 Fix from $1,9502013-12-07 HIGH 9.3 CVE-2013-0845 libavcodec/alsdec.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via a crafted block length, which triggers an out-of… Ffmpeg after 1.0.3 Fix from $1,9502013-12-07 HIGH 9.3 CVE-2013-0846 Array index error in the qdm2_decode_super_block function in libavcodec/qdm2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified im… Ffmpeg after 1.0 Fix from $1,9502013-12-07 HIGH 9.3 CVE-2013-0847 The ff_id3v2_parse function in libavformat/id3v2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via ID3v2 header data, … Ffmpeg after 1.0 Fix from $1,9502013-12-07 HIGH 9.3 CVE-2013-0848 The decode_init function in libavcodec/huffyuv.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted width in hu… Ffmpeg after 1.0 Fix from $1,9502013-12-07 HIGH 9.3 CVE-2013-0849 The roq_decode_init function in libavcodec/roqvideodec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted (1)… Ffmpeg after 1.0 Fix from $1,9502013-12-07 HIGH 9.3 CVE-2013-0850 The decode_slice_header function in libavcodec/h264.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted H.264 da… Ffmpeg after 1.0 Fix from $1,9502013-12-07 HIGH 9.3 CVE-2013-0851 The decode_frame function in libavcodec/eamad.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted Electronic Art… Ffmpeg after 1.0 Fix from $1,9502013-12-07 HIGH 9.3 CVE-2013-0852 The parse_picture_segment function in libavcodec/pgssubdec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted R… Ffmpeg after 1.0 Fix from $1,9502013-12-07 HIGH 9.3 CVE-2013-0853 The wavpack_decode_frame function in libavcodec/wavpack.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted WavP… Ffmpeg after 1.0 Fix from $1,9502013-12-07 HIGH 9.3 CVE-2013-0854 The mjpeg_decode_scan_progressive_ac function in libavcodec/mjpegdec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via… Ffmpeg after 1.0 Fix from $1,9502013-12-07 HIGH 9.3 CVE-2013-0855 Integer overflow in the alac_decode_close function in libavcodec/alac.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact vi… Ffmpeg after 1.0 Fix from $1,9502013-12-07 HIGH 9.3 CVE-2013-0856 The lpc_prediction function in libavcodec/alac.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted Apple Lossles… Ffmpeg after 1.0 Fix from $1,9502013-12-07 HIGH 9.3 CVE-2013-0857 The decode_frame_ilbm function in libavcodec/iff.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted height va… Ffmpeg after 1.0 Fix from $1,9502013-12-07 HIGH 10.0 CVE-2013-0864 The gif_copy_img_rect function in libavcodec/gifdec.c in FFmpeg before 1.1.2 performs an incorrect calculation for an "end pointer," which allows rem… Ffmpeg after 1.1.1 Fix from $1,9502013-11-23 HIGH 9.3 CVE-2013-0862 Multiple integer overflows in the process_frame_obj function in libavcodec/sanm.c in FFmpeg before 1.1.2 allow remote attackers to have an unspecifie… Ffmpeg after 1.1.1 Fix from $1,9502013-11-23 HIGH 9.3 CVE-2013-0863 Buffer overflow in the rle_decode function in libavcodec/sanm.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attackers to have an unsp… Ffmpeg after 1.0.3 Fix from $1,9502013-11-23 HIGH 9.3 CVE-2013-0865 The vqa_decode_chunk function in libavcodec/vqavideo.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attackers to have an unspecified i… Ffmpeg after 1.0.2 Fix from $1,9502013-11-23 HIGH 9.3 CVE-2013-0866 The aac_decode_init function in libavcodec/aacdec.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attackers to have an unspecified impa… Ffmpeg after 1.0.2 Fix from $1,9502013-11-23 HIGH 9.3 CVE-2013-0867 The decode_slice_header function in libavcodec/h264.c in FFmpeg before 1.1.2 does not properly check when the pixel format changes, which allows remo… Ffmpeg after 1.1.1 Fix from $1,9502013-11-23 HIGH 9.3 CVE-2013-0868 libavcodec/huffyuvdec.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted Huffyuv data, related to an out-of-b… Ffmpeg after 1.1.1 Fix from $1,9502013-11-23 HIGH 9.3 CVE-2013-0869 The field_end function in libavcodec/h264.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted H.264 data, rela… Ffmpeg after 1.1.1 Fix from $1,9502013-11-23 MEDIUM 5.0 CVE-2013-0861 The avcodec_decode_audio4 function in libavcodec/utils.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.1 allows remote attackers to trigger memory corr… Ffmpeg after 1.0.2 Fix from $1,6002013-11-23 HIGH 10.0 CVE-2013-0872 The swr_init function in libswresample/swresample.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid or un… Ffmpeg after 1.1.2 Fix from $1,9502013-11-23 HIGH 10.0 CVE-2013-0873 The read_header function in libavcodec/shorten.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid channel … Ffmpeg after 1.1.2 Fix from $1,9502013-11-23