CVE-2013-0869

The fieldend function in libavcodec/h264.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted H.264 data, related to an SPS and slice mismatch and an out-of-bounds array access...

Design/Logic Flaw

The fieldend function in libavcodec/h264.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted H.264 data, related to an SPS and slice mismatch and an out-of-bounds array access...

CVE-2013-0869

FFmpeg before 1.1.2 is vulnerable to a denial-of-service via field_end() in libavcodec/h264.c when processing crafted H.264 data (SPS/slice mismatch and out-of-bounds access). A patch was released with FFmpeg 1.1.2 and later versions to fix the issue; upgrade to 1.1.2+ or apply the vendor patch. ...

CVE-2013-0869

The fieldend function in libavcodec/h264.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted H.264 data, related to an SPS and slice mismatch and an out-of-bounds array access...

CVE-2013-0867

The decodesliceheader function in libavcodec/h264.c in FFmpeg before 1.1.2 does not properly check when the pixel format changes, which allows remote attackers to have unspecified impact via crafted H.264 video data, related to an out-of-bounds array access...

CVE-2013-0867

FFmpeg vulnerability CVE-2013-0867: the decode_slice_header function in libavcodec/h264.c before 1.1.2 does not properly validate when the pixel format changes, allowing a remote attacker to trigger an unspecified impact via crafted H.264 video data, related to an out-of-bounds array access. Affe...

CVE-2013-0869

The fieldend function in libavcodec/h264.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted H.264 data, related to an SPS and slice mismatch and an out-of-bounds array access...

HP Data Protector CRS Opcode 264 Stack Buffer Overflow (CVE-2013-2327)

A stack buffer overflow has been discovered in HP Data Protector...

PinApp Mail-SeCure Access Control Failure

Advisory ID Internal CORE-2013-0904 1. Advisory Information Title: PinApp Mail-SeCure Access Control Failure Advisory ID: CORE-2013-0904 Advisory URL:https://www.coresecurity.com/core-labs/advisories/pinapp-mail-secure-access-control-failure Date published: 2013-10-02 Date of last update:...

PinApp Mail-SeCure Access Control Failure

Core Security Technologies Advisory - A security vulnerability was discovered in PineApp Mail-SeCure Suite, allowing a non-privileged attacker to get a root shell by sending a specially crafted command from the Mail-SeCure console. A valid user account is needed to launch the attack, so this is a...

FFmpeg 'libavcodec'越界内存访问漏洞(CVE-2013-4358)

BUGTRAQ ID: 62440 CVECAN ID: CVE-2013-4358 FFmpeg是一个免费的可以执行音讯和视讯多种格式的录影、转档、串流功能的软件。 FFmpeg 0.11.3的libavcodec H.264代码存在安全漏洞，攻击者可利用此漏洞在受影响用户上下文中执行任意代码，越界读写。 0 FFmpeg 0.11.3 厂商补丁： FFmpeg ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://ffmpeg.org/security.html...

Brickcom 100ap Series Authentication Bypass / CSRF

============================================================================ BRICKCOM ==================================================================== ============================================================================ 1.Advisory Information Title: Brickcom 100ap Series Vulnerabiliti...

APPLE-SA-2013-05-22-1 QuickTime 7.7.4

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-05-22-1 QuickTime 7.7.4 QuickTime 7.7.4 is now available and addresses the following: QuickTime Available for: Windows 7, Vista, XP SP2 or later Impact: Opening a maliciously crafted TeXML file may lead to an unexpected application...

CVE-2013-1018

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with H.264 encoding...

Buffer overflow

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with H.264 encoding...

CVE-2013-1018

Apple QuickTime CVE-2013-1018 is a buffer overflow in parsing of H.264-encoded movie data that could allow remote code execution or crash. It is documented as affecting QuickTime prior to 7.7.4; multiple advisories and scanners list this CVE among others related to QuickTime vulnerabilities. Reme...

CVE-2013-1018

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with H.264 encoding...

CVE-2013-2685

Stack-based buffer overflow in res/resformatattrh264.c in Asterisk Open Source 11.x before 11.2.2 allows remote attackers to execute arbitrary code via a long sprop-parameter-sets H.264 media attribute in a SIP Session Description Protocol SDP header...

CVE-2013-2685

Stack-based buffer overflow in res/resformatattrh264.c in Asterisk Open Source 11.x before 11.2.2 allows remote attackers to execute arbitrary code via a long sprop-parameter-sets H.264 media attribute in a SIP Session Description Protocol SDP header...

Stack overflow

Stack-based buffer overflow in res/resformatattrh264.c in Asterisk Open Source 11.x before 11.2.2 allows remote attackers to execute arbitrary code via a long sprop-parameter-sets H.264 media attribute in a SIP Session Description Protocol SDP header...