Debian Security Advisory DSA 3342-1 (vlc - security update)

Loren Maggiore of Trail of Bits discovered that the 3GP parser of VLC, a multimedia player and streamer, could dereference an arbitrary pointer due to insufficient restrictions on a writable buffer. This could allow remote attackers to execute arbitrary code via crafted 3GP files. OpenVAS...

vlc -- arbitrary pointer dereference vulnerability

oCERT reports: The stable VLC version suffers from an arbitrary pointer dereference vulnerability. The vulnerability affects the 3GP file format parser, insufficient restrictions on a writable buffer can be exploited to execute arbitrary code via the heap memory. A specific 3GP file can be crafte...

PT-2015-3382

Name of the Vulnerable Software and Affected Versions VideoLAN VLC media player version 2.2.1 Description The issue is related to a buffer overflow in memory, which can be triggered by a specially crafted .3GP file. This can allow a remote attacker to execute arbitrary code or cause a denial of...

DSA-3342-1 vlc - security update

Bulletin has no description...

RealPlayer 15.0.6.14 .3gp Crash PoC

No description provided by source. !/usr/bin/perl Title : RealPlayer 3GP file handling memory corruption Version : 15.0.6.14 Date : 2012-10-18 Vendor : http://www.real.com/ Impact : High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Author : coolkaveh Bug : ----...

Windows Media Player with K-Lite Codec Pack DoS PoC

No description provided by source. Greetings, There is a DOS condition on windows media player when the klite codec pack is installed. Exploit Title: Windows Media Player with klite codec pack DOS Poc Date: 14/06/2011 Author: Nicolas Krassas , www.twitter.com/dinosn Version:Windows Media Player 1...

RealNetworks RealPlayer '.3gp' Memory Corruption Vulnerability (Jun 2014) - Mac OS X

RealPlayer is prone to a memory corruption vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:realnetworks:realplayer...

RealNetworks RealPlayer '.3gp' Memory Corruption Vulnerability (Jun 2014) - Windows

RealPlayer is prone to a memory corruption vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:realnetworks:realplayer...

CVE-2014-3444

The GetGUID function in codecs/dmp4.dll in RealNetworks RealPlayer 16.0.3.51 and earlier allows remote attackers to execute arbitrary code or cause a denial of service write access violation and application crash via a malformed .3gp file...

Code injection

The GetGUID function in codecs/dmp4.dll in RealNetworks RealPlayer 16.0.3.51 and earlier allows remote attackers to execute arbitrary code or cause a denial of service write access violation and application crash via a malformed .3gp file...

CVE-2014-3444

The GetGUID function in codecs/dmp4.dll in RealNetworks RealPlayer 16.0.3.51 and earlier allows remote attackers to execute arbitrary code or cause a denial of service write access violation and application crash via a malformed .3gp file...

CVE-2014-3444: Improper Control of Generation of Code

The GetGUID function in codecs/dmp4.dll in RealNetworks RealPlayer 16.0.3.51 and earlier allows remote attackers to execute arbitrary code or cause a denial of service write access violation and application crash via a malformed .3gp file...

RealPlayer - .3gp File Processing Memory Corruption

RealPlayer - .3gp File Processing Memory Corruption source: https://www.securityfocus.com/bid/67434/info RealPlayer is prone to a memory-corruption vulnerability. An attacker can leverage this issue to crash the affected application, causing a denial-of-service condition. Due to the nature of thi...

Realplayer 16.0.3.51 Memory Corruption

Exploit Title: Realplayer memory corruption in latest Version 16.0.3.51 Date: 2014/05/13 Exploit Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage: www.real.com Software Link:...

RealPlayer - '.3gp' File Processing Memory Corruption

source: https://www.securityfocus.com/bid/67434/info RealPlayer is prone to a memory-corruption vulnerability. An attacker can leverage this issue to crash the affected application, causing a denial-of-service condition. Due to the nature of this issue, arbitrary code execution may be possible bu...

Apple QuickTime 3GP Parsing Remote Code Execution Vunerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

RealPlayer 15.0.6.14.3gp - Crash (PoC)

RealPlayer 15.0.6.14.3gp - Crash PoC !/usr/bin/perl Title : RealPlayer 3GP file handling memory corruption Version : 15.0.6.14 Date : 2012-10-18 Vendor : http://www.real.com/ Impact : High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Author : coolkaveh Bug : ----...

RealPlayer 15.0.6.14 Memory Corruption

!/usr/bin/perl Title : RealPlayer 3GP file handling memory corruption Version : 15.0.6.14 Date : 2012-10-18 Vendor : http://www.real.com/ Impact : High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Author : coolkaveh Bug : ---- Memory corruption during the handlin...

RealPlayer 15.0.6.14 (.3GP) Arbitrary Code Execution POC

RealPlayer 15.0.6.14 suffers from Arbitrary Code Execution during handling a .3GP file Title : RealPlayer 15.0.6.14 .3GP Arbitrary Code Execution Version : 15.0.6.14 Date : 2012-10-18 Vendor : http://www.real.com/ Impact : High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : X...

VLC Media Player '.3gp'文件除零拒绝服务漏洞

BUGTRAQ ID: 54791 VLC Media Player是多媒体播放器（最初命名为VideoLAN客户端）是VideoLAN计划的多媒体播放器。 VLC Media Player 2.0.2及其他版本在实现上存在拒绝服务漏洞，成功利用可允许攻击者造成受影响应用崩溃。 0 VLC Media Player 2.0.2 厂商补丁： VideoLAN -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.videolan.org/ !/usr/bin/perl my $a...