Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-0832 State: PUBLISHED Published: 2013-01-15T21:00:00 Last Updated: 2024-08-06T14:41:47.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to printing. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=160380 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16310 - http://googlechromereleases.blogspot.com/2013/01/s
rg/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16310 - http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html
CVE ID: CVE-2013-0833 State: PUBLISHED Published: 2013-01-15T21:00:00 Last Updated: 2024-08-06T14:41:47.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to printing. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html - http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15726 - https://code.google.com/p/chromium/issues/detail?id=154485
CVE ID: CVE-2013-0834 State: PUBLISHED Published: 2013-01-15T21:00:00 Last Updated: 2024-08-06T14:41:47.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors involving glyphs. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html - http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16307 - https://code.google.com/p/chromium/issues/detail?id=154283
CVE ID: CVE-2013-0835 State: PUBLISHED Published: 2013-01-15T21:00:00 Last Updated: 2024-08-06T14:41:47.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Geolocation implementation in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service (application crash) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html - https://code.google.com/p/chromium/issues/detail?id=152921 - http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mi
blogspot.com/2013/01/stable-channel-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16263
CVE ID: CVE-2013-0836 State: PUBLISHED Published: 2013-01-15T21:00:00 Last Updated: 2024-08-06T14:41:47.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google V8 before 3.14.5.3, as used in Google Chrome before 24.0.1312.52, does not properly implement garbage collection, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html - https://code.google.com/p/chromium/issues/detail?id=150545 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.
ode.google.com/p/chromium/issues/detail?id=150545 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16459 - http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html
CVE ID: CVE-2013-0837 State: PUBLISHED Published: 2013-01-15T21:00:00 Last Updated: 2024-08-06T14:41:47.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of extension tabs. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=145363 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html - http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova
t.com/2013/01/stable-channel-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15868
CVE ID: CVE-2013-0838 State: PUBLISHED Published: 2013-01-15T21:00:00 Last Updated: 2024-08-06T14:41:47.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 24.0.1312.52 on Linux uses weak permissions for shared memory segments, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html - http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html - https://code.google.com/p/chromium/issues/detail?id=143859
CVE ID: CVE-2013-0839 State: PUBLISHED Published: 2013-01-24T21:00:00 Last Updated: 2024-08-06T14:41:47.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Google Chrome before 24.0.1312.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of fonts in CANVAS elements. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2013/01/stable-channel-update_22.html - https://code.google.com/p/chromium/issues/detail?id=151008 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16327
CVE ID: CVE-2013-0840 State: PUBLISHED Published: 2013-01-24T21:00:00 Last Updated: 2024-08-06T14:41:47.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 24.0.1312.56 does not validate URLs during the opening of new windows, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16335 - http://googlechromereleases.blogspot.com/2013/01/stable-channel-update_22.html - https://code.google.com/p/chromium/issues/detail?id=170532
CVE ID: CVE-2013-0841 State: PUBLISHED Published: 2013-01-24T21:00:00 Last Updated: 2024-08-06T14:41:47.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the content-blocking functionality in Google Chrome before 24.0.1312.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=169770 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16000 - http://googlechromereleases.blogspot.com/2013/01/stable-channel-update_22.html
CVE ID: CVE-2013-0842 State: PUBLISHED Published: 2013-01-24T21:00:00 Last Updated: 2024-08-06T14:41:47.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 24.0.1312.56 does not properly handle %00 characters in pathnames, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=166867 - http://googlechromereleases.blogspot.com/2013/01/stable-channel-update_22.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16456
CVE ID: CVE-2013-0843 State: PUBLISHED Published: 2013-01-24T21:00:00Z Last Updated: 2024-09-16T22:51:16.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: content/renderer/media/webrtc_audio_renderer.cc in Google Chrome before 24.0.1312.56 on Mac OS X does not use an appropriate buffer size for the 96 kHz sampling rate, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a web site that provides WebRTC audio. Additional Analyst Notes: - CVE Program Container: References: - http://src.chromium.org/viewvc/chrome?view=rev&revision=175323 - https://code.google.com/p/chromium/issues/detail
ces: - http://src.chromium.org/viewvc/chrome?view=rev&revision=175323 - https://code.google.com/p/chromium/issues/detail?id=166523 - https://codereview.chromium.org/11773017 - http://googlechromereleases.blogspot.com/2013/01/stable-channel-update_22.html - http://src.chromium.org/viewvc/chrome/trunk/src/content/renderer/media/webrtc_audio_renderer.cc?r1=175323&r2=175322&pathrev=175323
CVE ID: CVE-2013-0844 State: PUBLISHED Published: 2013-12-07T21:00:00 Last Updated: 2024-08-06T14:41:47.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the adpcm_decode_frame function in libavcodec/adpcm.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via crafted DK4 data, which triggers an out-of-bounds array access. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=85a14dbd5dca34320f58b1ba11dd6dd0df4fb3be - http://www.debian.org/security/2013/dsa-2793 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=f18c873ab5ee3c78d00fdcc2582b39c133faecb4 - h
ty/2013/dsa-2793 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=f18c873ab5ee3c78d00fdcc2582b39c133faecb4 - http://www.ffmpeg.org/security.html
CVE ID: CVE-2013-0845 State: PUBLISHED Published: 2013-12-07T21:00:00 Last Updated: 2024-08-06T14:41:47.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: libavcodec/alsdec.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via a crafted block length, which triggers an out-of-bounds write. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=0ceca269b66ec12a23bf0907bd2c220513cdbf16 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=6df0d3e2916c223dbe4262bf1b876dff1cb3f980 - http://www.debian.org/security/2014/dsa-2855 - http://www.ffmpeg.org/security.html
CVE ID: CVE-2013-0846 State: PUBLISHED Published: 2013-12-07T21:00:00 Last Updated: 2024-08-06T14:41:47.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the qdm2_decode_super_block function in libavcodec/qdm2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted QDM2 data, which triggers an out-of-bounds array access. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=a7ee6281f7ef1c29284e3a4cadfe0f227ffde1ed - http://www.debian.org/security/2014/dsa-2855 - http://www.ffmpeg.org/security.html
CVE ID: CVE-2013-0847 State: PUBLISHED Published: 2013-12-07T21:00:00 Last Updated: 2024-08-06T14:41:47.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ff_id3v2_parse function in libavformat/id3v2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via ID3v2 header data, which triggers an out-of-bounds array access. Additional Analyst Notes: - CVE Program Container: References: - http://www.ffmpeg.org/security.html - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=10416a4d56fa8a89784e4fb62099c3cab17a9952
CVE ID: CVE-2013-0848 State: PUBLISHED Published: 2013-12-07T21:00:00 Last Updated: 2024-08-06T14:41:47.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decode_init function in libavcodec/huffyuv.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted width in huffyuv data with the predictor set to median and the colorspace set to YUV422P, which triggers an out-of-bounds array access. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2014:227 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=6abb9a901fca27da14d4fffbb01948288b5da3ba - http://www.ffmpeg.org/secur
git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=6abb9a901fca27da14d4fffbb01948288b5da3ba - http://www.ffmpeg.org/security.html
CVE ID: CVE-2013-0849 State: PUBLISHED Published: 2013-12-07T21:00:00 Last Updated: 2024-08-06T14:41:47.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: The roq_decode_init function in libavcodec/roqvideodec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted (1) width or (2) height dimension that is not a multiple of sixteen in id RoQ video data. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-2855 - http://www.ffmpeg.org/security.html - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=3ae610451170cd5a28b33950006ff0bd23036845
CVE ID: CVE-2013-0850 State: PUBLISHED Published: 2013-12-07T21:00:00 Last Updated: 2024-08-06T14:41:47.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decode_slice_header function in libavcodec/h264.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted H.264 data, which triggers an out-of-bounds array access. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2793 - http://www.ffmpeg.org/security.html - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=d6c184880ee2e09fd68c0ae217173832cee5afc1
CVE ID: CVE-2013-0851 State: PUBLISHED Published: 2013-12-07T21:00:00 Last Updated: 2024-08-06T14:41:47.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decode_frame function in libavcodec/eamad.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted Electronic Arts Madcow video data, which triggers an out-of-bounds array access. Additional Analyst Notes: - CVE Program Container: References: - http://www.ffmpeg.org/security.html - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=63ac64864c6e0e84355aa3caa5b92208997a9a8d
CVE ID: CVE-2013-0852 State: PUBLISHED Published: 2013-12-07T21:00:00 Last Updated: 2024-08-06T14:41:47.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: The parse_picture_segment function in libavcodec/pgssubdec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted RLE data, which triggers an out-of-bounds array access. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2014:227 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=c0d68be555f5858703383040e04fcd6529777061 - http://www.ffmpeg.org/security.html
CVE ID: CVE-2013-0853 State: PUBLISHED Published: 2013-12-07T21:00:00 Last Updated: 2024-08-06T14:41:47.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wavpack_decode_frame function in libavcodec/wavpack.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted WavPack data, which triggers an out-of-bounds array access, possibly due to an off-by-one error. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2793 - http://www.ffmpeg.org/security.html - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=be818df547c3b0ae4fadb50fd210139a8636706a
CVE ID: CVE-2013-0854 State: PUBLISHED Published: 2013-12-07T21:00:00 Last Updated: 2024-08-06T14:41:47.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mjpeg_decode_scan_progressive_ac function in libavcodec/mjpegdec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted MJPEG data. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2793 - http://www.ffmpeg.org/security.html - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=1f41cffe1e3e79620f587545bdfcbd7e6e68ed29
CVE ID: CVE-2013-0855 State: PUBLISHED Published: 2013-12-07T21:00:00 Last Updated: 2024-08-06T14:41:47.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the alac_decode_close function in libavcodec/alac.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a large number of samples per frame in Apple Lossless Audio Codec (ALAC) data, which triggers an out-of-bounds array access. Additional Analyst Notes: - CVE Program Container: References: - http://www.ffmpeg.org/security.html - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=3920d1387834e2bc334aff9f518f4beb24e470bd
CVE ID: CVE-2013-0856 State: PUBLISHED Published: 2013-12-07T21:00:00 Last Updated: 2024-08-06T14:41:47.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: The lpc_prediction function in libavcodec/alac.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted Apple Lossless Audio Codec (ALAC) data, related to a large nb_samples value. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=fd4f4923cce6a2cbf4f48640b4ac706e614a1594 - http://www.ffmpeg.org/security.html
CVE ID: CVE-2013-0857 State: PUBLISHED Published: 2013-12-07T21:00:00 Last Updated: 2024-08-06T14:41:47.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decode_frame_ilbm function in libavcodec/iff.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted height value in IFF PBM/ILBM bitmap data. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2793 - http://www.ffmpeg.org/security.html - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=2fbb37b51bbea891392ad357baf8f3dff00bac05
CVE ID: CVE-2013-0858 State: PUBLISHED Published: 2013-12-07T21:00:00 Last Updated: 2024-08-06T14:41:47.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: The atrac3_decode_init function in libavcodec/atrac3.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via ATRAC3 data with the joint stereo coding mode set and fewer than two channels. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2793 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=2502914c5f8eb77659d7c0868396862557a63245 - http://www.ffmpeg.org/security.html - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=13451f5520
862557a63245 - http://www.ffmpeg.org/security.html - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=13451f5520ce6b0afde861b2285dda659f8d4fb4
CVE ID: CVE-2013-0859 State: PUBLISHED Published: 2013-12-07T21:00:00 Last Updated: 2024-08-06T14:41:47.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: The add_doubles_metadata function in libavcodec/tiff.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a negative or zero count value in a TIFF image, which triggers an out-of-bounds array access. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=6d1c5ea04af3e345232aa70c944de961061dab2d - http://www.ffmpeg.org/security.html
CVE ID: CVE-2013-0860 State: PUBLISHED Published: 2013-11-23T18:00:00 Last Updated: 2024-08-06T14:41:47.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ff_er_frame_end function in libavcodec/error_resilience.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.1 does not properly verify that a frame is fully initialized, which allows remote attackers to trigger a NULL pointer dereference via crafted picture data. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=68a0477bc0af026db971ddba22541029a9e8715b - http://www.mandriva.com/security/advisories?name=MDVSA-2014:227 - http://www.ffmpeg.org/security.html - h
1029a9e8715b - http://www.mandriva.com/security/advisories?name=MDVSA-2014:227 - http://www.ffmpeg.org/security.html - https://security.gentoo.org/glsa/201603-06 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=3e196e4def03c7a91423803402f84d638d316c33
CVE ID: CVE-2013-0861 State: PUBLISHED Published: 2013-11-23T18:00:00 Last Updated: 2024-08-06T14:41:47.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: The avcodec_decode_audio4 function in libavcodec/utils.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.1 allows remote attackers to trigger memory corruption via vectors related to the channel layout. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=43c6b45a53a186a187f7266e4d6bd3c2620519f1 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=4cd1dad91ae97fe1f0dd534c3f5566787566f137 - http://www.ffmpeg.org/security.html - https://security.gentoo.org/gl
diff%3Bh=4cd1dad91ae97fe1f0dd534c3f5566787566f137 - http://www.ffmpeg.org/security.html - https://security.gentoo.org/glsa/201603-06
CVE ID: CVE-2013-0862 State: PUBLISHED Published: 2013-11-23T18:00:00 Last Updated: 2024-08-06T14:41:47.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the process_frame_obj function in libavcodec/sanm.c in FFmpeg before 1.1.2 allow remote attackers to have an unspecified impact via crafted image dimensions in LucasArts Smush video data, which triggers an out-of-bounds array access. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=f4fb841ad13bab66d4fb0c7ff2a94770df7815d8 - http://www.ffmpeg.org/security.html - https://security.gentoo.org/glsa/201603-06
CVE ID: CVE-2013-0863 State: PUBLISHED Published: 2013-11-23T18:00:00 Last Updated: 2024-08-06T14:41:47.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the rle_decode function in libavcodec/sanm.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attackers to have an unspecified impact via crafted LucasArts Smush video data. Additional Analyst Notes: - CVE Program Container: References: - http://www.ffmpeg.org/security.html - https://security.gentoo.org/glsa/201603-06 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=62c9beda0c189db5cb61fa772057e3af9521f293 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=89e16e675d3cbe76cf4581f
9beda0c189db5cb61fa772057e3af9521f293 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=89e16e675d3cbe76cf4581f98bf4ac300cab0286
CVE ID: CVE-2013-0864 State: PUBLISHED Published: 2013-11-23T18:00:00 Last Updated: 2024-08-06T14:41:47.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gif_copy_img_rect function in libavcodec/gifdec.c in FFmpeg before 1.1.2 performs an incorrect calculation for an "end pointer," which allows remote attackers to have an unspecified impact via crafted GIF data that triggers an out-of-bounds array access. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=9547034f9120187e23ad76424dd4d70247e62212 - http://www.ffmpeg.org/security.html - https://security.gentoo.org/glsa/201603-06
CVE ID: CVE-2013-0865 State: PUBLISHED Published: 2013-11-23T18:00:00 Last Updated: 2024-08-06T14:41:47.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vqa_decode_chunk function in libavcodec/vqavideo.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attackers to have an unspecified impact via a large (1) cbp0 or (2) cbpz chunk in Westwood Studios VQA Video file, which triggers an out-of-bounds write. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=08e2c7a45f82b897a285548c257972eb1ad352c5 - http://www.debian.org/security/2014/dsa-2855 - http://www.ffmpeg.org/security.html - https://secur