Search CVE reports
41 – 50 of 72 results
CVE-2014-8545
Medium prioritylibavcodec/pngdec.c in FFmpeg before 2.4.2 accepts the monochrome-black format without verifying that the bits-per-pixel value is 1, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly...
2 affected packages
ffmpeg, mplayer
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
ffmpeg | — | — | — | Not affected | Not affected |
mplayer | — | — | — | Not affected | Not affected |
CVE-2014-8548
Medium prioritySome fixes available 2 of 9
Off-by-one error in libavcodec/smc.c in FFmpeg before 2.4.2 allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted Quicktime Graphics (aka SMC) video data.
3 affected packages
ffmpeg, libav, mplayer
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
ffmpeg | — | — | — | Not affected | Not affected |
libav | — | — | — | Not in release | Not in release |
mplayer | — | — | — | Not affected | Not affected |
CVE-2014-8547
Medium prioritySome fixes available 2 of 9
libavcodec/gifdec.c in FFmpeg before 2.4.2 does not properly compute image heights, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted GIF data.
3 affected packages
ffmpeg, libav, mplayer
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
ffmpeg | — | — | — | Not affected | Not affected |
libav | — | — | — | Not in release | Not in release |
mplayer | — | — | — | Not affected | Not affected |
CVE-2014-8544
Medium prioritySome fixes available 2 of 10
libavcodec/tiff.c in FFmpeg before 2.4.2 does not properly validate bits-per-pixel fields, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted TIFF data.
3 affected packages
ffmpeg, libav, mplayer
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
ffmpeg | — | — | — | Not affected | Not affected |
libav | — | — | — | Not in release | Not in release |
mplayer | — | — | — | Not affected | Not affected |
CVE-2014-8543
Medium prioritySome fixes available 2 of 9
libavcodec/mmvideo.c in FFmpeg before 2.4.2 does not consider all lines of HHV Intra blocks during validation of image height, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have...
3 affected packages
ffmpeg, libav, mplayer
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
ffmpeg | — | — | — | Not affected | Not affected |
libav | — | — | — | Not in release | Not in release |
mplayer | — | — | — | Not affected | Not affected |
CVE-2014-8542
Medium prioritySome fixes available 2 of 9
libavcodec/utils.c in FFmpeg before 2.4.2 omits a certain codec ID during enforcement of alignment, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via...
3 affected packages
ffmpeg, libav, mplayer
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
ffmpeg | — | — | — | Not affected | Not affected |
libav | — | — | — | Not in release | Not in release |
mplayer | — | — | — | Not affected | Not affected |
CVE-2014-8541
Low prioritySome fixes available 2 of 9
libavcodec/mjpegdec.c in FFmpeg before 2.4.2 considers only dimension differences, and not bits-per-pixel differences, when determining whether an image size has changed, which allows remote attackers to cause a denial of service...
3 affected packages
ffmpeg, libav, mplayer
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
ffmpeg | — | — | — | Not affected | Not affected |
libav | — | — | — | Not in release | Not in release |
mplayer | — | — | — | Not affected | Not affected |
CVE-2011-3625
Medium prioritySome fixes available 5 of 10
Stack-based buffer overflow in the sub_read_line_sami function in subreader.c in MPlayer, as used in SMPlayer 0.6.9, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long...
2 affected packages
mplayer, mplayer2
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
mplayer | — | — | — | — | — |
mplayer2 | — | — | — | — | — |
CVE-2009-0385
Medium prioritySome fixes available 4 of 24
Integer signedness error in the fourxm_read_header function in libavformat/4xm.c in FFmpeg before revision 16846 allows remote attackers to execute arbitrary code via a malformed 4X movie file with a large current_track value,...
7 affected packages
ffmpeg, ffmpeg-debian, gstreamer0.10-ffmpeg, kino, motion...
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
ffmpeg | — | — | — | — | — |
ffmpeg-debian | — | — | — | — | — |
gstreamer0.10-ffmpeg | — | — | — | — | — |
kino | — | — | — | — | — |
motion | — | — | — | — | — |
mplayer | — | — | — | — | — |
smilutils | — | — | — | — | — |
CVE-2008-5616
Medium priorityStack-based buffer overflow in the demux_open_vqf function in libmpdemux/demux_vqf.c in MPlayer 1.0 rc2 before r28150 allows remote attackers to execute arbitrary code via a malformed TwinVQ file.
1 affected packages
mplayer
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
mplayer | — | — | — | — | — |