CVE-2017-14644

A heap-based buffer overflow was discovered in the AP4HdlrAtom class in Bento4 1.5.0-617. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution...

CVE-2017-14640

A NULL pointer dereference was discovered in AP4AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of service...

CVE-2017-14642

CVE-2017-14642 involves Bento4, specifically the AP4_HdlrAtom class in version 1.5.0-617. The issue is a NULL pointer dereference that leads to a segmentation fault in AP4_StdcFileByteStream::ReadPartial, resulting in remote denial of service. The connected sources confirm the affected component ...

CVE-2017-14647

The CVE affects Bento4 1.5.0-617: a heap-based buffer overflow in AP4_VisualSampleEntry::ReadFields (Core/Ap4SampleEntry.cpp) causes an out-of-bounds write, leading to remote denial of service or possibly code execution. No details on exploit vectors or fixes are provided in the connected sources...

CVE-2017-14638

AP4AtomFactory::CreateAtomFromStream in Core/Ap4AtomFactory.cpp in Bento4 version 1.5.0-617 has missing NULL checks, leading to a NULL pointer dereference, segmentation fault, and application crash in AP4Atom::SetType in Core/Ap4Atom.h...

CVE-2017-14641

A NULL pointer dereference was discovered in the AP4DataAtom class in MetaData/Ap4MetaData.cpp in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of service...

CVE-2017-14643

The AP4HdlrAtom class in Core/Ap4HdlrAtom.cpp in Bento4 version 1.5.0-617 uses an incorrect character data type, leading to a heap-based buffer over-read and application crash in AP4BytesToUInt32BE in Core/Ap4Utils.h...

SAP E-Recruiting Input Validation Vulnerability

SAP E-Recruiting also known as ERECRUIT is a set of German SAP SAP electronic recruitment system. The system has automatic personnel screening, filtering and sorting functions. A security vulnerability exists in SAP E-Recruiting versions 605 through 617. A remote attacker could exploit this...

2 0 1 6 vulnerability Bounty hack report-vulnerability warning-the black bar safety net

! /Article/UploadPic/2016-10/2016108154237845.jpg Introduction Today, we are very pleased to be able to share with everyone from the HackerOne 2 0 1 6 vulnerability Bounty hack report. The current vulnerability Bounty programs are booming, of course, behind the rapid development is inseparable fr...

Amazon Linux: Security Advisory (ALAS-2015-617)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Western Digital Arkeia Remote Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Western Digital Arkeia Remote Code Execution', 'Description' = %q This module exploits a code execution flaw in Western Digital Arke...

SAP Player 0.9 - '.pla' Universal Local Buffer Overflow (SEH)

!/usr/bin/python SAP player 0.9 .pla Universal Local BoF Exploit SEH Download: http://www.sorinara.com/sap/sap09.exe Credits go to: PLATEN Coded by: Steven Seeley aka mrme Tested on Windows XP SP3 Its not dead till its buried ; windows/shell/reversetcp - 617 bytes stage 1 http://www.metasploit.co...

Ubuntu Update for samba regression USN-617-2

Ubuntu Update for Linux kernel vulnerabilities USN-617-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN6172.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for samba regression USN-617-2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.ne...

Arkeia Type 77 Request buffer overflow

Added: 01/24/2006 CVE: CVE-2005-0491 BID: 12594 OSVDB: 14011 Background The Arkeia network backup software includes a daemon program called arkeiad which listens for connections on TCP port 617. Problem A buffer overflow in the processing of type 77 requests sent to the arkeiad listener allows...

Arkeia Type 77 Request buffer overflow

Added: 01/24/2006 CVE: CVE-2005-0491 BID: 12594 OSVDB: 14011 Background The Arkeia network backup software includes a daemon program called arkeiad which listens for connections on TCP port 617. Problem A buffer overflow in the processing of type 77 requests sent to the arkeiad listener allows...