Search Results (Refine Search)
- CPE Product Version: cpe:/a:ffmpeg:ffmpeg:2.0.7
Vuln ID | Summary | CVSS Severity |
---|---|---|
CVE-2014-8546 |
Integer underflow in libavcodec/cinepak.c in FFmpeg before 2.4.2 allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted Cinepak video data. Published: November 05, 2014; 6:55:08 AM -0500 |
V3.x:(not available) V2.0: 7.5 HIGH |
CVE-2014-8545 |
libavcodec/pngdec.c in FFmpeg before 2.4.2 accepts the monochrome-black format without verifying that the bits-per-pixel value is 1, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted PNG data. Published: November 05, 2014; 6:55:08 AM -0500 |
V3.x:(not available) V2.0: 7.5 HIGH |
CVE-2014-8544 |
libavcodec/tiff.c in FFmpeg before 2.4.2 does not properly validate bits-per-pixel fields, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted TIFF data. Published: November 05, 2014; 6:55:07 AM -0500 |
V3.x:(not available) V2.0: 7.5 HIGH |
CVE-2014-8543 |
libavcodec/mmvideo.c in FFmpeg before 2.4.2 does not consider all lines of HHV Intra blocks during validation of image height, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted MM video data. Published: November 05, 2014; 6:55:07 AM -0500 |
V3.x:(not available) V2.0: 7.5 HIGH |
CVE-2014-8542 |
libavcodec/utils.c in FFmpeg before 2.4.2 omits a certain codec ID during enforcement of alignment, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted JV data. Published: November 05, 2014; 6:55:07 AM -0500 |
V3.x:(not available) V2.0: 7.5 HIGH |
CVE-2014-8541 |
libavcodec/mjpegdec.c in FFmpeg before 2.4.2 considers only dimension differences, and not bits-per-pixel differences, when determining whether an image size has changed, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted MJPEG data. Published: November 05, 2014; 6:55:07 AM -0500 |
V3.x:(not available) V2.0: 7.5 HIGH |
CVE-2014-2099 |
The msrle_decode_frame function in libavcodec/msrle.c in FFmpeg before 2.1.4 does not properly calculate line sizes, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Microsoft RLE video data. Published: March 01, 2014; 11:57:25 PM -0500 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
CVE-2014-2098 |
libavcodec/wmalosslessdec.c in FFmpeg before 2.1.4 uses an incorrect data-structure size for certain coefficients, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted WMA data. Published: March 01, 2014; 11:57:25 PM -0500 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
CVE-2014-2097 |
The tak_decode_frame function in libavcodec/takdec.c in FFmpeg before 2.1.4 does not properly validate a certain bits-per-sample value, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted TAK (aka Tom's lossless Audio Kompressor) data. Published: March 01, 2014; 11:57:25 PM -0500 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
CVE-2014-2263 |
The mpegts_write_pmt function in the MPEG2 transport stream (aka DVB) muxer (libavformat/mpegtsenc.c) in FFmpeg, possibly 2.1 and earlier, allows remote attackers to have unspecified impact and vectors, which trigger an out-of-bounds write. Published: February 28, 2014; 7:55:05 PM -0500 |
V3.x:(not available) V2.0: 6.8 MEDIUM |