CVE-2010-4704

libavcodec/vorbisdec.c in the Vorbis decoder in FFmpeg 0.6.1 and earlier allows remote attackers to cause a denial of service application crash via a crafted .ogg file, related to the vorbisfloor0decode function. NOTE: this might overlap CVE-2011-0480...

Design/Logic Flaw

libavcodec/vorbisdec.c in the Vorbis decoder in FFmpeg 0.6.1 and earlier allows remote attackers to cause a denial of service application crash via a crafted .ogg file, related to the vorbisfloor0decode function. NOTE: this might overlap CVE-2011-0480...

Integer overflow

Integer overflow in the vorbisresiduedecodeinternal function in libavcodec/vorbisdec.c in the Vorbis decoder in FFmpeg, possibly 0.6, has unspecified impact and remote attack vectors, related to the sizes of certain integer data types. NOTE: this might overlap CVE-2011-0480...

CVE-2010-4704

libavcodec/vorbisdec.c in the Vorbis decoder in FFmpeg 0.6.1 and earlier allows remote attackers to cause a denial of service application crash via a crafted .ogg file, related to the vorbisfloor0decode function. NOTE: this might overlap CVE-2011-0480...

CVE-2011-0480

Multiple buffer overflows in vorbisdec.c in the Vorbis decoder in FFmpeg, as used in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, allow remote attackers to cause a denial of service memory corruption and application crash or possibly have unspecified other impact via a craft...

CVE-2011-0480

CVE-2011-0480 involves FFmpeg’s Vorbis decoder (libavcodec/vorbis_dec.c) with multiple buffer overflows that can be triggered by a crafted WebM file, leading to memory corruption and possible denial of service or other impact. The vulnerability affects FFmpeg as used in browsers (e.g., Chrome pri...

CVE-2011-0480

Multiple buffer overflows in vorbisdec.c in the Vorbis decoder in FFmpeg, as used in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, allow remote attackers to cause a denial of service memory corruption and application crash or possibly have unspecified other impact via a craft...

Microsoft MPEG Layer-3 Remote Command Execution Exploit

No description provided by source. ''' Title : Microsoft MPEG Layer-3 Remote Command Execution Exploit Version : l3codeca.acm XP SP2 / XP SP3 Analysis : http://www.abysssec.com Vendor : http://www.microsoft.com Impact : Ciritical Contact : shahin at abysssec.com , info at abysssec.com Twitter :...

Microsoft MPEG Layer-3 Remote Command Execution Exploit

Exploit for windows platform in category remote exploits ======================================================= Microsoft MPEG Layer-3 Remote Command Execution Exploit ======================================================= Title : Microsoft MPEG Layer-3 Audio Decoder Division By Zero Version :...

Microsoft MPEG Layer-3 - Remote Command Execution

Microsoft MPEG Layer-3 - Remote Command Execution ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | par...

CVE-2010-0480

creationtimestamp| type| source ---|---|--- 2010-09-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14895 2010-09-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15096 2011-08-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17659 2018-05-29...

CVE-2010-0480

Multiple stack-based buffer overflows in the MPEG Layer-3 audio codecs in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to execute arbitrary code via a crafted AVI file, aka "MPEG Layer-3 Audio Decoder...

CVE-2010-0480

CVE-2010-0480 is a remote code execution vulnerability in Microsoft MPEG Layer-3 codecs. The issue arises from multiple stack-based buffer overflows in the MPEG Layer-3 audio decoders (l3codecx.ax and related ACM codecs) when processing crafted AVI files, affecting Windows 2000 SP4, XP SP2/SP3, S...

Microsoft Windows MP3音频解码器栈溢出漏洞（MS10-026）

BUGTRAQ ID: 39303 CVE ID: CVE-2010-0480 Microsoft Windows是微软发布的非常流行的操作系统。 Windows中所使用的MP3编码解码器处理AVI媒体文件的方式中存在栈溢出漏洞。如果用户打开包含MP3音频流的特制的AVI文件，此漏洞可能允许远程执行代码。如果用户使用管理用户权限登录，成功利用此漏洞的攻击者便可完全控制受影响的系统。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft Windows Vista SP...

MS10-026: Vulnerability in Microsoft MPEG Layer-3 Codecs Could Allow Remote Code Execution (977816)

The Microsoft MPEG Layer-3 MP3 codecs have a buffer overflow vulnerability that is triggered by opening a specially crafted AVI file with an MP3 audio stream. A remote attacker could exploit this by tricking a user into opening a malicious AVI file, which would lead to arbitrary code execution. C...

poppler security update

CentOS Errata and Security Advisory CESA-2009:1504 Updated poppler packages that fix multiple security issues and a bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Poppler is a Portable...

Sun Solaris ip(7P)实现拒绝服务漏洞

BUGTRAQ ID: 33550 CVE ID：CVE-2009-0480 CNCVE ID：CNCVE-20090480 Sun Solaris是一款商业性质的操作系统。 Sun Solaris IP7pInternet协议相关最小号分配的实现存在安全问题，本地攻击者可以利用漏洞分配大量套接字而导致32位应用程序触发拒绝服务攻击。 目前没有详细漏洞细节提供。 Sun Solaris 9x86 Sun Solaris 9 Sun Solaris 8x86 Sun Solaris 8 Sun Solaris 10x86 Sun Solaris 10 Sun OpenSolaris bui...

CVE-2009-0480

CVE-2009-0480 affects Sun Solaris 8–10 and older OpenSolaris builds (pre-sn v82). The IP implementation allocates minor socket numbers via an improper arena, enabling local users to trigger denial of service by opening many sockets (32-bit app failure and login outage). Affected: Solaris 8/9/10 (...

CVE-2008-0480

CVE-2008-0480 affects Web Wiz Forums 9.07 and earlier. The vulnerability is a directory traversal in the sub parameter of two scripts (RTE_file_browser.asp and file_browser.asp), allowing remote attackers to list arbitrary directories and access .txt and .zip files. The underlying issue is improp...

Cisco Multiple Devices Crafted IP Option Remote Code Execution (CSCeh52410)

The remote version of IOS contains a flaw that could cause the remote router to crash when processing specially malformed IP packets. An attacker might use these flaws to execute arbitrary code on the remote routers. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid2474...