Debian DSA-2624-1 : ffmpeg - several vulnerabilities

Several vulnerabilities have been discovered in FFmpeg, a multimedia player, server and encoder. Multiple input validations in the decoders/demuxers for Shorten, Chinese AVS video, VP5, VP6, AVI, AVS and MPEG-1/2 files could lead to the execution of arbitrary code. Most of these issues were...

[SECURITY] [DSA 2624-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2624-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 16, 2013 http://www.debian.org/security/faq -...

Gentoo Security Advisory GLSA 201210-06 (libav)

The remote host is missing updates announced in advisory GLSA 201210-06. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CVE-2012-0858

The CVE-2012-0858 family affects FFmpeg’s Shorten codec (shorten.c) in FFmpeg 0.7.x and 0.8.x and Libav 0.5.x–0.8.x, where processing a crafted Shorten file can trigger an invalid free, leading to application crash or possible remote code execution. Affected ranges are FFmpeg: 0.7.x before 0.7.12...

CVE-2012-0858

The Shorten codec shorten.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary...

RHEL 6 : xerces-j2 (RHSA-2011:0858)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0858 advisory. - xerces-j2, JDK: XML parsing Denial-Of-Service 6845701 CVE-2009-2625 Note that Nessus has not tested for this issue but has instead relied only on t...

CVE-2011-0858

Unspecified vulnerability in Oracle PeopleSoft Enterprise HRMS 9.0 Bundle 15 and 9.1 Bundle 5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Talent Acquisition Manager...

CVE-2010-0858

Oracle E-Business Suite versions 11.5.10.2, 12.0.6, and 12.1.2 include an unspecified vulnerability in the E-Business Intelligence component that allows remote authenticated users to affect integrity via unknown vectors. Details are limited: root cause, exact vector, and affected subcomponents ar...

Ubuntu USN-801-1 (tiff)

The remote host is missing an update to tiff announced via advisory USN-801-1. OpenVAS Vulnerability Test $Id: ubuntu8011.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8011.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-801-1 tiff Authors: Thomas Reinke...

[SECURITY] [DSA 1831-1] New djbdns packages fix privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-1831-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst July 13, 2009 http://www.debian.org/security/faq -...

CVE-2009-0858

The responseaddname function in response.c in Daniel J. Bernstein djbdns 1.05 and earlier does not constrain offsets in the required manner, which allows remote attackers, with control over a third-party subdomain served by tinydns and axfrdns, to trigger DNS responses containing arbitrary record...

CVE-2009-0858

The responseaddname function in response.c in Daniel J. Bernstein djbdns 1.05 and earlier does not constrain offsets in the required manner, which allows remote attackers, with control over a third-party subdomain served by tinydns and axfrdns, to trigger DNS responses containing arbitrary record...

CVE-2009-0858

djbdns (tinydns/axfrdns) 1.05 and earlier contains a programming error that does not constrain offsets as required, enabling remote attackers controlling a subdomain to trigger DNS responses containing arbitrary records via crafted zone data. In Debian, this was addressed in DSA-1831-1 with fixes...

CVE-2009-0858

creationtimestamp| type| source ---|---|--- 2009-02-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32825...

FreeBSD Ports: zebra

The remote host is missing an update to the system as announced in the referenced advisory. VID cad045c0-81a5-11d8-9645-0020ed76ef5a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: zebra

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-0858

Buffer overflow in the Visnetic anti-virus plugin in Kerio MailServer before 6.5.0 might allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2008-0858

CVE-2008-0858 : Kerio MailServer before 6.5.0 suffers a buffer overflow in the Visnetic anti-virus plug‑in that may allow a remote attacker to execute arbitrary code via unspecified vectors. The exact exploit mechanism is not detailed in the provided documents. Affected product: Kerio MailServer;...

Debian Security Advisory DSA 415-1 (zebra)

The remote host is missing an update to zebra announced via advisory DSA 415-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2006-0858

CVE-2006-0858 describes an unquoted Windows search path vulnerability affecting StarForce Safe’n’Sec Personal + Anti-Spyware 2.0 and earlier. The vulnerable components are (1) snsmcon.exe, (2) the autostart mechanism, and (3) an unspecified installation component, which could allow local users to...