UBUNTU-CVE-2021-40607

The schmboxsize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

CVE-2021-40608

The gfhintertrackfinalize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

CVE-2021-40609

The GetHintFormat function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

Command injection

The schmboxsize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

Command injection

The GetHintFormat function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

CVE-2021-40606

The gfbswritedata function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

GPAC 代码问题漏洞

GPAC is a multimedia framework. GPAC MP4Box version 1.1.0 suffers from a denial of service vulnerability that originates in the gfhintertrackfinalize function. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted file in the MP4Box command...

The vulnerability of microprogrammed software in PACsystems programmable logic controllers, related to insufficient verification of data authenticity, allows a intruder to execute arbitrary code.

The vulnerability of microprogrammed programmable logic controllers from PACsystems is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker, operating remotely, to execute arbitrary code using a specially crafted file written in...

CVE-2021-40609

GPAC 1.0.1 is affected by CVE-2021-40609 due to GetHintFormat vulnerability that allows DoS via a crafted MP4Box file. Debian/DSA-5411 fixes upgrade to 1.0.1+dfsg1-4+deb11u2; other advisories recommend upgrading to newer GPAC versions. No exploitation details in provided documents.

GPAC 安全漏洞

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC version 1.0.1, which originates from the schmboxsize function. An attacker can exploit this vulnerability to cause a denial of service via a specially crafted file in the MP4Box command...

CVE-2021-40608

The gfhintertrackfinalize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

CVE-2021-40608

The gfhintertrackfinalize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

CVE-2021-40609

The GetHintFormat function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

CVE-2021-40606

The gfbswritedata function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

CVE-2022-33009

A stored cross-site scripting XSS vulnerability in LightCMS v1.3.11 allows attackers to execute arbitrary web scripts or HTML via uploading a crafted PDF file...

USN-5492-1 vim vulnerability

It was discovered that Vim incorrectly handled memory when opening and searching the contents of certain files. If an attacker could trick a user into opening a specially crafted file, it could cause Vim to crash...

The vulnerability of Adobe Illustrator, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of Adobe Illustrator graphic editor is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

The vulnerability of the Adobe Illustrator graphic editor lies in the ability to write beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Adobe Illustrator graphic editor is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

The vulnerability of the Azure Real Time Operating System GUIX Studio in the development environment, related to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Azure Real Time Operating System GUIX Studio lies in insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...

The vulnerability of Adobe InCopy, a text creation and editing software, relates to memory usage after it is freed. This allows an attacker to execute arbitrary code.

The vulnerability of the Adobe InCopy text creation and editing software is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created file...