Mozilla: Use-after-free when using the Fluendo MP3 GStreamer plugin (MFSA 2015-31)

Use-after-free vulnerability in the AppendElements function in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 on Linux, when the Fluendo MP3 plugin for GStreamer is used, allows remote attackers to execute arbitrary code or cause a denial of service heap...

UBUNTU-CVE-2015-0813

Use-after-free vulnerability in the AppendElements function in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 on Linux, when the Fluendo MP3 plugin for GStreamer is used, allows remote attackers to execute arbitrary code or cause a denial of service heap...

jetAudio 8.1.3 Basic (mp3) - Crash (PoC)

Exploit Title : jetAudio 8.1.3 Basic Corrupted mp3 Crash POC Product : jetAudio Basic Date : 8.12.2014 Exploit Author : ITDefensor Vulnerability Research Team http://itdefensor.ru/ Software Link : http://www.jetaudio.com/download/ Vulnerable version : 8.1.3 Latest at the moment and probably...

NovaPlayer 1.0 (.mp3) Local Denial of Service (DoS) #

No description provided by source. !/usr/bin/perl print qq NovaPlayer 1.0 .mp3 Local Denial of Service DoS by Mr.tro0oqy ; author: Mr.tro0oqy email : [email protected]:[email protected] greetz : Red-D3v1L , virushima , Stack system color e; my $bb=tro0oqy.mp3; my $fk=\x41 x 10000; open...

Apple QuickTime/Darwin Streaming MP3Broadcaster 0 ID3 Tag Handling Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7660/info MP3Broadcaster is shipped as part of Darwin Streaming Server software. MP3Broadcaster has been reported prone to a vulnerability when processing malicious ID3 tags. This is likely due to insufficient sanity chec...

DEBIAN-CVE-2012-6618

The avprobeinputbuffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running with certain -probesize values, allows remote attackers to cause a denial of service crash via a crafted MP3 file, possibly related to frame size or lack of sufficient "frames to estimate rate."...

CVE-2012-6618

The avprobeinputbuffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running with certain -probesize values, allows remote attackers to cause a denial of service crash via a crafted MP3 file, possibly related to frame size or lack of sufficient "frames to estimate rate."...

CVE-2012-6618

The avprobeinputbuffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running with certain -probesize values, allows remote attackers to cause a denial of service crash via a crafted MP3 file, possibly related to frame size or lack of sufficient "frames to estimate rate."...

UBUNTU-CVE-2012-6618

The avprobeinputbuffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running with certain -probesize values, allows remote attackers to cause a denial of service crash via a crafted MP3 file, possibly related to frame size or lack of sufficient "frames to estimate rate."...

Design/Logic Flaw

The avprobeinputbuffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running with certain -probesize values, allows remote attackers to cause a denial of service crash via a crafted MP3 file, possibly related to frame size or lack of sufficient "frames to estimate rate."...

CVE-2012-6618

The avprobeinputbuffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running with certain -probesize values, allows remote attackers to cause a denial of service crash via a crafted MP3 file, possibly related to frame size or lack of sufficient "frames to estimate rate."...

Buffer overflow

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MP3 file...

CVE-2012-6044

M-Player 0.4 allows remote attackers to cause a denial of service crash via a crafted MP3 file...

Design/Logic Flaw

M-Player 0.4 allows remote attackers to cause a denial of service crash via a crafted MP3 file...

DEBIAN-CVE-2011-1087

Buffer overflow in VideoLAN VLC media player 1.0.5 allows user-assisted remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a crafted .mp3 file that is played during bookmark creation...

Buffer overflow

Buffer overflow in VideoLAN VLC media player 1.0.5 allows user-assisted remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a crafted .mp3 file that is played during bookmark creation...

CVE-2011-1087

Buffer overflow in VideoLAN VLC media player 1.0.5 allows user-assisted remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a crafted .mp3 file that is played during bookmark creation...

Orb 2.0.01.0049 2.54.0018 - DirectShow Denial of Service

Orb 2.0.01.0049 2.54.0018 - DirectShow Denial of Service When Orb is first installed it registers several Direct Show filters with the system. When registered these filters are then called whenever a file which has a dependency on such a required filter is accessed. By specially crafting specific...

Orb 2.0.01.0049 < 2.54.0018 - DirectShow Denial of Service

When Orb is first installed it registers several Direct Show filters with the system. When registered these filters are then called whenever a file which has a dependency on such a required filter is accessed. By specially crafting specific headers embedded into an mp3 file we can create a direct...

CVE-2009-0475

Integer underflow in the Huffman decoding functionality pvmp3huffmanparsing.cpp in OpenCORE 2.0 and earlier allows remote attackers to cause a denial of service process crash and possibly execute arbitrary code via a crafted MP3 file that triggers heap corruption...