Microsoft Windows Media Player Color Conversion Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Windows Media Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Microsoft Windows Media Player Color Transform Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Windows Media Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2017-2907

An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation suite version 2.78c. A specially created '.avi' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

Ffmpeg Denial of Service Vulnerability (CNVD-2018-08557)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'decodeinit' function in the libavcodec/utvideodec.c file in FFmpeg 3.4.2 and earlier versions. A remote attacker can exploit this vulnerability to...

Take a look at the Denial of Service Vulnerability in Video Player

Look Video is an online video player. Look Video generates a breakpoint exception when processing certain avi files, which can be exploited to cause a denial of service attack...

DEBIAN-CVE-2017-15186

Double free vulnerability in FFmpeg 3.3.4 and earlier allows remote attackers to cause a denial of service via a crafted AVI file...

FFmpeg arbitrary file read vulnerability analysis-vulnerability warning-the black bar safety net

Vulnerability analysis The vulnerability was originally developed by neex submitted to the HackerOne platform, and eventually get a 1000$bonus, the original link is https://hackerone.com/reports/226756 the. According to the authors, the exploitability of the vulnerability in the FFmpeg can handle...

LG MRA58K - Out-of-Bounds Heap Read in CAVIFileParser::Destroy Resulting in Invalid Free Exploit

Exploit for Android platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1221 Similar to the previously reported issue 1206 , when parsing AVI files the CAVIFileParser object contains a fixed-size array of what appears to be pointer/length pairs, used I...

LG MRA58K - Out-of-Bounds Heap Read in CAVIFileParser::Destroy Resulting in Invalid Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1221 Similar to the previously reported issue 1206 , when parsing AVI files the CAVIFileParser object contains a fixed-size array of what appears to be pointer/length pairs, used I suppose to store the data for each stream. This is...

LG MRA58K - Out-of-Bounds Heap Read in CAVIFileParser::Destroy Resulting in Invalid Free

LG MRA58K - Out-of-Bounds Heap Read in CAVIFileParser::Destroy Resulting in Invalid Free Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1221 Similar to the previously reported issue 1206 , when parsing AVI files the CAVIFileParser object contains a fixed-size array of what...

SUSE-SU-2017:1003-1 Security update for gstreamer-0_10-plugins-base

This update for gstreamer-010-plugins-base fixes the following security issues: - A crafted AVI file could have caused a floating point exception leading to DoS bsc1024076, CVE-2017-5837, bsc1024079, CVE-2017-5844...

CVE-2016-7905

The readgab2sub function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service NULL pointer used via a crafted AVI file...

CVE-2016-7122

The avireadnikon function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to infinite loop when it decodes an AVI file that has a crafted 'nctg' structure...

Security update for gstreamer-plugins-bad (important)

This update for gstreamer-plugins-bad fixes the following issues: - Maliciously crafted VMnc VMware video streams typically contained in .avi files could cause code execution during decoding or information leaks due to an unitialized buffer CVE-2016-9445, CVE-2016-9446, boo1010829...

Microsoft Windows AVI File Data Validation Integer Overflow (MS09-038) - Ver2 (CVE-2009-1546)

Audio Video Interleave AVI is a special case of Resource Interchange File Format RIFF.This file type used with applications that capture, edit, and play back audio-video sequences. The vulnerability is due to an error in the Windows component responsible for processing AVI files that does not...

Microsoft Windows Media 6.4/10.0 - MID Malformed Header Chunk DoS

No description provided by source. source: http://www.securityfocus.com/bid/21612/info Multiple applications are prone to a denial-of-service vulnerability. A remote attacker may exploit this vulnerability by presenting malicious 'WMV', 'MID', and 'AVI' files to a victim user. When an affected...

Totem Movie Player (Ubuntu) 3.4.3 Stack Corruption

No description provided by source. Title : Totem movie playerUbuntustack corruption Version : 3.4.3 GStreamer 0.10.36 Date : 2012-12-15 Vendor : http://projects.gnome.org/totem/index.html Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : Ubuntu 12.10 desktop 32...

Media Player Classic 6.4.9 Malformed AVI Header Multiple Remote Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/25650/info Media Player Classic MPC is prone to multiple remote vulnerabilities, including a heap-based buffer-overflow issue and an integer-overflow issue, when handling malformed AVI files. An attacker can exploit these...

Totem Movie Player 3.4.3 (Ubuntu) - Stack Corruption

Totem Movie Player 3.4.3 Ubuntu - Stack Corruption Title : Totem movie playerUbuntustack corruption Version : 3.4.3 GStreamer 0.10.36 Date : 2012-12-15 Vendor : http://projects.gnome.org/totem/index.html Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : Ubuntu...

Ubuntu Totem movie player stack corruption

The vulnerability cause a stack corruption via a specially crafted Avi files Title : Ubuntu Totem movie player stack corruption Version : 3.4.3 GStreamer 0.10.36 Date : 2012-12-15 Vendor : http://projects.gnome.org/totem/index.html Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter :...