UBUNTU-CVE-2018-7557

The decodeinit function in libavcodec/utvideodec.c in FFmpeg 2.8 through 3.4.2 allows remote attackers to cause a denial of service Out of array read via an AVI file with crafted dimensions within chroma subsampling data...

Ffmpeg 'decode_plane' function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'decodeplane' function in the libavcodec/utvideodec.c file in FFmpeg 3.4.2 and earlier versions. A remote attacker can exploit this vulnerability to...

Blender Sequencer avi_format_convert Integer Overflow Vulnerability

Blender is an open source cross-platform all-in-one 3D animation software, providing a series of animated short film production solutions from modeling, animation, materials, rendering, to audio processing, video editing and so on. An integer overflow vulnerability exists in Blender Sequencer...

Memory Corruption Vulnerability in AVI Video Processing by AVI Star

Video Star is a video player. A memory corruption vulnerability exists in the AVI video processing of the AVI Star player. An attacker can cause the program to crash by constructing a malformed AVI video, which if successfully exploited can lead to arbitrary code execution...

Harassment scandals, Sheldon Cooper, Black Mirror and blockchain

Lots of good jokes in a popular TV show The Big Bang Theory are related to Sheldon Cooper's bureaucracy in interpersonal relationships: all these "roommate agreement", "relationship agreement", etc. However, because of these endless harassment scandals in media, now it seems like a best practice ...

Chrome Flaw Allows Sites to Secretly Record Audio/Video Without Indication

What if your laptop is listening to everything that is being said during your phone calls or other people near your laptop and even recording video of your surrounding without your knowledge? Sounds really scary! Isn't it? But this scenario is not only possible but is hell easy to accomplish. A U...

[SECURITY] Fedora 26 Update: gst-editing-services-1.12.0-1.fc26

This is a high-level library for facilitating the creation of audio/video non-linear editors...

PT-2017-4189

Name of the Vulnerable Software and Affected Versions Yandex Browser for iOS versions prior to 16.10.0.2357 Description The issue is related to improper restriction of processing of facetime:// URLs, which allows remote attackers to initiate a facetime call without the user's approval and obtain...

Description of the cumulative update package for Office Communications Server 2007 R2, Audio/Video Conferencing Server: April 2010

Describes the issues that are fixed in the cumulative update package for Office Communications Server 2007 R2, Audio/Video Conferencing Server: April 2010SummaryThis article describes the issue that is fixed in the update package for Microsoft Office Communications Server 2007 R2, Audio/Video...

UBUNTU-CVE-2016-7905

The readgab2sub function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service NULL pointer used via a crafted AVI file...

DEBIAN-CVE-2016-7905

The readgab2sub function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service NULL pointer used via a crafted AVI file...

Warning! This Cross-Platform Malware Can Hack Windows, Linux and OS X Computers

Unlike specially crafted malware specifically developed to take advantage of Windows operating system platform, cyber attackers have started creating cross-platform malware for wider exploitation. Due to the rise in popularity of Mac OS X and other Windows desktop alternatives, hackers have begun...

WeChat has an arbitrary code execution vulnerability (badkernel)

WeChat is a free application from Tencent that provides instant messaging services for smart terminals. WeChat suffers from a remote arbitrary code execution vulnerability badkernel. Attackers using the vulnerability can carry out quasi-worm spread, and can be sent through the circle of friends a...

Mix Audio With Video - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Mix Audio With Video published at the 'play' market has multiple vulnerabilities...

Add Audio to Video - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Add Audio to Video published at the 'play' market has multiple vulnerabilities...

Memory Corruption Vulnerability in PhotoLine's Handling of AVI Files

PhotoLine is a professional image editing software from Germany. A memory corruption vulnerability exists in the software's handling of the AVI format, which can be exploited by an attacker to construct malformed AVI files that can crash the program and cause a denial of service condition...

[SECURITY] [DLA 420-1] libmatroska security update

Package : libmatroska Version : 0.8.1-1.1+deb6u1 CVE ID : CVE-2014-9765 It was discovered that there was a invalid memory address issue in libmatroska, an extensible open standard audio/video container format. When reading a block group or a simple block that uses EBML lacing the frame sizes...

Microsoft Windows AVI Processing Malformed Header Code Execution (MS09-038) - Ver2 (CVE-2009-1545)

Audio Video Interleave AVI is a special case of Resource Interchange File Format RIFF. This file type used with applications that capture, edit, and play back audio-video sequences. A remote code execution vulnerability has been discovered in the way Microsoft Windows handles specially crafted AV...

DEBIAN-CVE-2011-3623

Multiple stack-based buffer overflows in VideoLAN VLC media player before 1.0.2 allow remote attackers to execute arbitrary code via 1 a crafted ASF file, related to the ASFObjectDumpDebug function in modules/demux/asf/libasf.c; 2 a crafted AVI file, related to the AVIChunkDumpDebuglevel function...

Cross site scripting

Cross-site scripting XSS vulnerability in snetwork.asp in the Denon AVR-3313CI audio/video receiver allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, related to Friendlyname...