ffmpeg-debian - several vulnerabilities

Fixed packages 1

Vulnerabilities 9

• Unscored —
  CVE-2009-4631

  Off-by-one error in the VP3 decoder (vp3.c) in FFmpeg 0.5 allows remote attackers to cause a denial of service and poss…

  ffmpeg Debian
  Feb 10, 2010
• Unscored —
  CVE-2009-4632

  oggparsevorbis.c in FFmpeg 0.5 does not properly perform certain pointer arithmetic, which might allow remote attackers…

  ffmpeg Debian
  Feb 10, 2010
• Unscored —
  CVE-2009-4633

  vorbis_dec.c in FFmpeg 0.5 uses an assignment operator when a comparison operator was intended, which might allow remot…

  ffmpeg Debian
  Feb 10, 2010
• Unscored —
  CVE-2009-4634

  Multiple integer underflows in FFmpeg 0.5 allow remote attackers to cause a denial of service and possibly execute arbi…

  ffmpeg Debian
  Feb 10, 2010
• Unscored —
  CVE-2009-4635

  FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted MOV c…

  ffmpeg Debian
  Feb 10, 2010
• Unscored —
  CVE-2009-4636

  FFmpeg 0.5 allows remote attackers to cause a denial of service (hang) via a crafted file that triggers an infinite loo…

  ffmpeg Debian
  Feb 10, 2010
• Unscored —
  CVE-2009-4637 Public exploit EPSS 17%

  FFmpeg 0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown…

  ffmpeg Debian
  Feb 10, 2010
• Unscored —
  CVE-2009-4638

  Integer overflow in FFmpeg 0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitr…

  ffmpeg Debian
  Feb 10, 2010
• Unscored —
  CVE-2009-4640

  Array index error in vorbis_dec.c in FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execu…

  ffmpeg Debian
  Feb 10, 2010