| Max CVSS | 9.3 | Min CVSS | 6.8 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2013-7015 | 6.8 |
The flashsv_decode_frame function in libavcodec/flashsv.c in FFmpeg before 2.1 does not properly validate a certain height value, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified oth
|
03-12-2016 - 03:00 | 09-12-2013 - 16:36 | |
| CVE-2013-7014 | 6.8 |
Integer signedness error in the add_bytes_l2_c function in libavcodec/pngdsp.c in FFmpeg before 2.1 allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted PNG data.
|
03-12-2016 - 03:00 | 09-12-2013 - 16:36 | |
| CVE-2013-7010 | 6.8 |
Multiple integer signedness errors in libavcodec/dsputil.c in FFmpeg before 2.1 allow remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted data.
|
03-12-2016 - 03:00 | 09-12-2013 - 16:36 | |
| CVE-2013-0865 | 9.3 |
The vqa_decode_chunk function in libavcodec/vqavideo.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attackers to have an unspecified impact via a large (1) cbp0 or (2) cbpz chunk in Westwood Studios VQA Video file, which triggers an ou
|
03-12-2016 - 03:00 | 23-11-2013 - 18:55 | |
| CVE-2013-0846 | 9.3 |
Array index error in the qdm2_decode_super_block function in libavcodec/qdm2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted QDM2 data, which triggers an out-of-bounds array access.
|
08-03-2014 - 05:03 | 07-12-2013 - 21:55 | |
| CVE-2013-0849 | 9.3 |
The roq_decode_init function in libavcodec/roqvideodec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted (1) width or (2) height dimension that is not a multiple of sixteen in id RoQ video data.
|
08-03-2014 - 05:03 | 07-12-2013 - 21:55 | |
| CVE-2013-0845 | 9.3 |
libavcodec/alsdec.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via a crafted block length, which triggers an out-of-bounds write.
|
08-03-2014 - 05:03 | 07-12-2013 - 21:55 | |
| CVE-2011-3944 | 6.8 |
The smacker_decode_header_tree function in libavcodec/smacker.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Smacker data.
|
08-03-2014 - 04:50 | 09-12-2013 - 16:35 |