The vulnerability of the `ff_htmlmarkup_to_ass` function in the FFmpeg multimedia library allows a hacker to induce a service failure.

The vulnerability of the ffhtmlmarkuptoass function in the FFmpeg multimedia library relates to reading data beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using a specially crafted Matroska format video file...

PT-2019-19819 · FFmpeg · Libav

Name of the Vulnerable Software and Affected Versions: Libav version 12.3 Description: A stack-based buffer overflow issue exists in the subtitle decoder of Libav, potentially allowing attackers to corrupt the stack via a crafted video file in Matroska format. This issue arises from the misuse of...

[SECURITY] Fedora 29 Update: libmediainfo-19.04-1.fc29

This package contains the shared library for MediaInfo. MediaInfo supplies technical and tag information about a video or audio file. What information can I get from MediaInfo? General: title, author, director, album, track number, date, duration... Video: codec, aspect, fps, bitrate... Audio:...

[SECURITY] Fedora 30 Update: libmediainfo-19.04-1.fc30

This package contains the shared library for MediaInfo. MediaInfo supplies technical and tag information about a video or audio file. What information can I get from MediaInfo? General: title, author, director, album, track number, date, duration... Video: codec, aspect, fps, bitrate... Audio:...

ass-media.de XSS vulnerability

Open Bug Bounty ID: OBB-644956 Description| Value ---|--- Affected Website:| ass-media.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ass-team.net XSS vulnerability

Open Bug Bounty ID: OBB-623416 Description| Value ---|--- Affected Website:| ass-team.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ass-cat.com XSS vulnerability

Open Bug Bounty ID: OBB-592641 Description| Value ---|--- Affected Website:| ass-cat.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ALPINE-CVE-2016-7969

The wraplinessmart function in assrender.c in libass before 0.13.4 allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors, related to "0/3 line wrapping equalization."...

UBUNTU-CVE-2016-7969

The wraplinessmart function in assrender.c in libass before 0.13.4 allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors, related to "0/3 line wrapping equalization."...

[SECURITY] Fedora 23 Update: libass-0.13.4-1.fc23

Libass is a portable library for SSA/ASS subtitles rendering...

[SECURITY] Fedora 25 Update: libass-0.13.4-1.fc25

Libass is a portable library for SSA/ASS subtitles rendering...

PT-2017-9438

Name of the Vulnerable Software and Affected Versions libass versions prior to 0.13.4 Description The issue allows remote attackers to cause a denial of service, specifically a memory allocation failure, via unspecified vectors. This is related to the check allocations function in libass/ass...

VLC 0.8.6 [b][c][d][a] - (.ASS file) buffer overflow exploit(win32 universal)

No description provided by source. /%VLC vs 0.6.8 bcda .ASS file buffer overflow exploitwin32 universal %Works every time,works on any win32 OS,tested on Windows xp sp2. %My doctor said that I have seriuouse problems ,but I think he's full of it because the voices tell me I'm ok!/ includestdio.h...

PT-2013-2048

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.0.2 Description The issue allows remote attackers to cause a denial of service, resulting in a crash due to a NULL pointer dereference. This occurs when a subtitle dialog without text is processed by the ff ass split...

British VPN Service Defends Role in Lulzsec Bust

British virtual private network VPN company Hide My Ass has taken a stand about their involvement in the arrest of an alleged Lulzsec member last week. In a blog post published on Friday, the company reiterated that they keep logs of their users’ history for 30 days and they will cooperate with l...

CVE-2010-0364

Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg file with a crafted Advanced SubStation Alpha Subtitle .ass file, probably involving the Dialogue field...

CVE-2010-0364

VLC Media Player 0.8.6 is affected by a stack-based buffer overflow when processing an ogg file containing a crafted Advanced SubStation Alpha Subtitle (.ass) file, likely in the Dialogue field. This allows user-assisted remote code execution. Multiple security feeds (OpenVAS and NVD) corroborate...

VLC媒体播放器ASS文件解析缓冲区溢出漏洞

BUGTRAQ ID: 37832 VLC Media Player是一款免费的媒体播放器。 用户受骗使用VLC媒体播放器打开了畸形的.ASS文件就可以触发缓冲区溢出，导致执行任意指令。 VideoLAN VLC Media Player 0.6.8 厂商补丁： VideoLAN -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.videolan.org/ http://www.exploit-db.com/download/11174...

Unfixed XSS vulnerability at www.worldsfinestass.com

Security researcher TreX, has submitted on 17/12/2007 a cross-site-scripting XSS vulnerability affecting www.worldsfinestass.com, which at the time of submission ranked 9811 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/12/2007. It is...