Google Android - ih264d_process_intra_mb Memory Corruption

Google Android - ih264dprocessintramb Memory Corruption Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=523 The attached file causes a crash in ih264dprocessintramb in avc parsing, likely due to incorrect bounds checking in one of the memcpy or memset calls in the method. The fi...

Android - ih264d_process_intra_mb Memory Corruption

Exploit for Android platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=523 The attached file causes a crash in ih264dprocessintramb in avc parsing, likely due to incorrect bounds checking in one of the memcpy or memset calls in the method. The file...

Adobe Flash - Processing AVC Causes Stack Corruption

Adobe Flash - Processing AVC Causes Stack Corruption Source: https://code.google.com/p/google-security-research/issues/detail?id=634 The attached mp4 file causes stack corruption in Flash. To run the test, load LoadMP42.swf?file=null.mp4 from a remote server. Proof of Concept:...

Adobe Flash - Processing AVC Causes Stack Corruption

Source: https://code.google.com/p/google-security-research/issues/detail?id=634 The attached mp4 file causes stack corruption in Flash. To run the test, load LoadMP42.swf?file=null.mp4 from a remote server. Proof of Concept:...

Adobe Flash - Processing AVC Causes Stack Corruption

Exploit for multiple platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=634 The attached mp4 file causes stack corruption in Flash. To run the test, load LoadMP42.swf?file=null.mp4 from a remote server. Proof of Concept:...

CVE-2015-6286

Cisco Application Visibility and Control AVC 15.33JA, when FlexConnect is enabled, allows remote attackers to cause a denial of service access-point outage via a crafted UDP packet, aka Bug ID CSCuu47016...

Code injection

Cisco Application Visibility and Control AVC 15.33JA, when FlexConnect is enabled, allows remote attackers to cause a denial of service access-point outage via a crafted UDP packet, aka Bug ID CSCuu47016...

CVE-2015-6286

Cisco Application Visibility and Control AVC 15.33JA, when FlexConnect is enabled, allows remote attackers to cause a denial of service access-point outage via a crafted UDP packet, aka Bug ID CSCuu47016...

CVE-2015-6286

Cisco AVC 15.3(3)JA with FlexConnect is vulnerable to DoS via crafted UDP packets that fail UDP packet validation, potentially making an access point unavailable. Affected component is Cisco Application Visibility and Control (AVC) in FlexConnect mode; root cause is improper validation of UDP pac...

CVE-2015-6286: Undefined Security Weakness

Cisco Application Visibility and Control AVC 15.33JA, when FlexConnect is enabled, allows remote attackers to cause a denial of service access-point outage via a crafted UDP packet, aka Bug ID CSCuu47016...

Fedora Update for 389-ds-base FEDORA-2015-7206

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 22 Update: setroubleshoot-3.2.22-1.fc22

setroubleshoot GUI. Application that allows you to view setroubleshoot-serv er messages. Provides tools to help diagnose SELinux problems. When AVC messages are generated an alert can be generated that will give information about the problem and help track its resolution. Alerts can be configured...

RHEL 5 / 6 / 7 : setroubleshoot (RHSA-2015:0729)

The remote Redhat Enterprise Linux 5 / 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:0729 advisory. The setroubleshoot packages provide tools to help diagnose SELinux problems. When Access Vector Cache AVC messages are returned, an alert can...

setroubleshoot security update

CentOS Errata and Security Advisory CESA-2015:0729 Updated setroubleshoot packages that fix one security issue are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS...

Important: Red Hat Security Advisory: setroubleshoot security update

Updated setroubleshoot packages that fix one security issue are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

ipa security, bug fix, and enhancement update

4.1.0-18.0.1 - Replace login-screen-logo.png 20362818 - Drop subscription-manager requires for OL7 - Drop redhat-access-plugin-ipa requires for OL7 - Blank out header-logo.png product-name.png 4.1.0-18 - Fix ipa-pwd-extop global configuration caching 1187342 - group-detach does not add correct...

Fedora Update for kdeaccessibility FEDORA-2013-13112

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Elecard MPEG Player 5.8 Local PoC

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title:Elecard MPEG Player 5.8 Local PoC Download link :www.elecard.com/assets/files/distribs/mpeg-player/EMpgPlayer.zip Product: Vulnerable Elecard MPEG Player,Elecard AVC HD Player RST Date found: 27.04.2013 Date publish...

Scientific Linux Security Update : selinux-policy enhancement update on SL6.x i386/x86_64 (20121112)

This update adds the following enhancements : - Previously, SELinux was blocking the /usr/libexec/qemu-kvm utility during a migration of a virtual machine from Red Hat Enterprise Virtualization Manager. Consequently, such a migration attempt failed and AVC messages were returned. This update fixe...

Scientific Linux Security Update : selinux-policy enhancement update on SL5.x, SL6.x i386/x86_64 (20120911)

This update adds the following enhancements : - Previously, with the MLS policy activated, a user created with a MLS level was not able to log into the system using the ssh utility because an appropriate MLS policy rule was missing. This update adds the MLS rule and users can now log into the...