FreeBSD : vlc -- arbitrary pointer dereference vulnerability (a0a4e24c-4760-11e5-9391-3c970e169bc2)

oCERT reports : The stable VLC version suffers from an arbitrary pointer dereference vulnerability. The vulnerability affects the 3GP file format parser, insufficient restrictions on a writable buffer can be exploited to execute arbitrary code via the heap memory. A specific 3GP file can be craft...

[SECURITY] [DSA 3342-1] vlc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3342-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini August 20, 2015 https://www.debian.org/security/faq -...

vlc -- arbitrary pointer dereference vulnerability

oCERT reports: The stable VLC version suffers from an arbitrary pointer dereference vulnerability. The vulnerability affects the 3GP file format parser, insufficient restrictions on a writable buffer can be exploited to execute arbitrary code via the heap memory. A specific 3GP file can be crafte...

PT-2015-3382

Name of the Vulnerable Software and Affected Versions VideoLAN VLC media player version 2.2.1 Description The issue is related to a buffer overflow in memory, which can be triggered by a specially crafted .3GP file. This can allow a remote attacker to execute arbitrary code or cause a denial of...

DSA-3342-1 vlc - security update

Bulletin has no description...

Debian Security Advisory DSA 3342-1 (vlc - security update)

Loren Maggiore of Trail of Bits discovered that the 3GP parser of VLC, a multimedia player and streamer, could dereference an arbitrary pointer due to insufficient restrictions on a writable buffer. This could allow remote attackers to execute arbitrary code via crafted 3GP files. OpenVAS...

Windows Media Player with K-Lite Codec Pack DoS PoC

No description provided by source. Greetings, There is a DOS condition on windows media player when the klite codec pack is installed. Exploit Title: Windows Media Player with klite codec pack DOS Poc Date: 14/06/2011 Author: Nicolas Krassas , www.twitter.com/dinosn Version:Windows Media Player 1...

RealPlayer 15.0.6.14 .3gp Crash PoC

No description provided by source. !/usr/bin/perl Title : RealPlayer 3GP file handling memory corruption Version : 15.0.6.14 Date : 2012-10-18 Vendor : http://www.real.com/ Impact : High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Author : coolkaveh Bug : ----...

RealNetworks RealPlayer '.3gp' Memory Corruption Vulnerability (Jun 2014) - Mac OS X

RealPlayer is prone to a memory corruption vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:realnetworks:realplayer...

RealNetworks RealPlayer '.3gp' Memory Corruption Vulnerability (Jun 2014) - Windows

RealPlayer is prone to a memory corruption vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:realnetworks:realplayer...

CVE-2014-3444

The GetGUID function in codecs/dmp4.dll in RealNetworks RealPlayer 16.0.3.51 and earlier allows remote attackers to execute arbitrary code or cause a denial of service write access violation and application crash via a malformed .3gp file...

Code injection

The GetGUID function in codecs/dmp4.dll in RealNetworks RealPlayer 16.0.3.51 and earlier allows remote attackers to execute arbitrary code or cause a denial of service write access violation and application crash via a malformed .3gp file...

CVE-2014-3444

The GetGUID function in codecs/dmp4.dll in RealNetworks RealPlayer 16.0.3.51 and earlier allows remote attackers to execute arbitrary code or cause a denial of service write access violation and application crash via a malformed .3gp file...

PT-2014-5328

Name of the Vulnerable Software and Affected Versions RealPlayer versions 16.0.3.51 and earlier Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in a write access violation and application crash, via a malformed .3gp file. This is due...

CVE-2014-3444: Improper Control of Generation of Code

The GetGUID function in codecs/dmp4.dll in RealNetworks RealPlayer 16.0.3.51 and earlier allows remote attackers to execute arbitrary code or cause a denial of service write access violation and application crash via a malformed .3gp file...

RealPlayer - '.3gp' File Processing Memory Corruption

source: https://www.securityfocus.com/bid/67434/info RealPlayer is prone to a memory-corruption vulnerability. An attacker can leverage this issue to crash the affected application, causing a denial-of-service condition. Due to the nature of this issue, arbitrary code execution may be possible bu...

Realplayer 16.0.3.51 Memory Corruption

Exploit Title: Realplayer memory corruption in latest Version 16.0.3.51 Date: 2014/05/13 Exploit Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage: www.real.com Software Link:...

RealPlayer - .3gp File Processing Memory Corruption

RealPlayer - .3gp File Processing Memory Corruption source: https://www.securityfocus.com/bid/67434/info RealPlayer is prone to a memory-corruption vulnerability. An attacker can leverage this issue to crash the affected application, causing a denial-of-service condition. Due to the nature of thi...

Apple QuickTime 3GP Parsing Remote Code Execution Vunerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

PT-2013-2810

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.4 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted movie file with H.264 encoding. This is related to a buffer overflow in the handling of...