Ffmpeg

Ffmpeg

495 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2009-4634

Exploit
  • EPSS 7.21%
  • Veröffentlicht 10.02.2010 02:30:00
  • Zuletzt bearbeitet 16.06.2026 23:14:03

Multiple integer underflows in FFmpeg 0.5 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted file that (1) bypasses a validation check in vorbis_dec.c and triggers a wraparound of the stack pointer, ...

9.3

CVE-2009-4635

Exploit
  • EPSS 8.09%
  • Veröffentlicht 10.02.2010 02:30:00
  • Zuletzt bearbeitet 16.06.2026 23:14:04

FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted MOV container with improperly ordered tags that cause (1) mov.c and (2) utils.c to use inconsistent codec types and identifiers, leading...

4.3

CVE-2009-4636

Exploit
  • EPSS 3.04%
  • Veröffentlicht 10.02.2010 02:30:00
  • Zuletzt bearbeitet 16.06.2026 23:14:04

FFmpeg 0.5 allows remote attackers to cause a denial of service (hang) via a crafted file that triggers an infinite loop.

10

CVE-2009-4637

Exploit
  • EPSS 17.04%
  • Veröffentlicht 10.02.2010 02:30:00
  • Zuletzt bearbeitet 16.06.2026 23:14:04

FFmpeg 0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger a stack-based buffer overflow.

4.3

CVE-2009-4638

Exploit
  • EPSS 3.91%
  • Veröffentlicht 10.02.2010 02:30:00
  • Zuletzt bearbeitet 16.06.2026 23:14:04

Integer overflow in FFmpeg 0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.

4.3

CVE-2009-4639

Exploit
  • EPSS 3%
  • Veröffentlicht 10.02.2010 02:30:00
  • Zuletzt bearbeitet 16.06.2026 23:14:04

The av_rescale_rnd function in the AVI demuxer in FFmpeg 0.5 allows remote attackers to cause a denial of service (crash) via a crafted AVI file that triggers a divide-by-zero error.

4.3

CVE-2009-4640

Exploit
  • EPSS 4%
  • Veröffentlicht 10.02.2010 02:30:00
  • Zuletzt bearbeitet 16.06.2026 23:14:04

Array index error in vorbis_dec.c in FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Vorbis file that triggers an out-of-bounds read.

9.3

CVE-2009-0385

  • EPSS 6.66%
  • Veröffentlicht 02.02.2009 19:30:00
  • Zuletzt bearbeitet 16.06.2026 23:04:55

Integer signedness error in the fourxm_read_header function in libavformat/4xm.c in FFmpeg before revision 16846 allows remote attackers to execute arbitrary code via a malformed 4X movie file with a large current_track value, which triggers a NULL p...

10

CVE-2008-4866

Exploit
  • EPSS 4.69%
  • Veröffentlicht 01.11.2008 00:00:01
  • Zuletzt bearbeitet 16.06.2026 22:58:39

Multiple buffer overflows in libavformat/utils.c in FFmpeg 0.4.9 before r14715, as used by MPlayer, allow context-dependent attackers to have an unknown impact via vectors related to execution of DTS generation code with a delay greater than MAX_REOR...

10

CVE-2008-4867

  • EPSS 2.38%
  • Veröffentlicht 01.11.2008 00:00:01
  • Zuletzt bearbeitet 16.06.2026 22:58:39

Buffer overflow in libavcodec/dca.c in FFmpeg 0.4.9 before r14917, as used by MPlayer, allows context-dependent attackers to have an unknown impact via vectors related to an incorrect DCA_MAX_FRAME_SIZE value.