CVE-2008-1482

CVE-2008-1482 affects xine-lib up to version 1.1.11. The description documents multiple integer overflows that can be triggered by crafted media files (FLV, MOV, RM, MVE, MKV, CAK) parsed by various demuxers (demux_flv.c, demux_qt.c, demux_real.c, demux_wc3movie.c, ebml.c, demux_film.c). These ov...

Adobe Flash CS3 Professional / Macromedia Flash MX code execution

Multiple code execution vulnerabilities on .FLV files parsing...

GLSA-200708-01 : Macromedia Flash Player: Remote arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-200708-01 Macromedia Flash Player: Remote arbitrary code execution Mark Hills discovered some errors when interacting with a browser for keystrokes handling CVE-2007-2022. Stefano Di Paola and Giorgio Fedon from Minded Security...

Macromedia Flash Player: Remote arbitrary code execution

Background The Macromedia Flash Player is a renderer for the popular SWF file type which is commonly used to provide interactive websites, digital experiences and mobile content. Description Mark Hills discovered some errors when interacting with a browser for keystrokes handling CVE-2007-2022...

CVE-2007-3456

Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via a large length value for a 1 Long string or 2 XML variable type in a crafted a FLV or b SWF file, related to an "input validation error," including a signed comparison of values...

Integer overflow

Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via a large length value for a 1 Long string or 2 XML variable type in a crafted a FLV or b SWF file, related to an "input validation error," including a signed comparison of values...

CVE-2007-3456

CVE-2007-3456 affects Adobe Flash Player 9.0.45.0 and earlier, with an input-validation/overflow issue in parsing FLV/SWF data that could allow remote code execution via crafted files (large string or XML variable). The vulnerability arises from a signed comparison of values expected non-negative...

CVE-2007-3456

Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via a large length value for a 1 Long string or 2 XML variable type in a crafted a FLV or b SWF file, related to an "input validation error," including a signed comparison of values...

Adobe Flash Player FLV integer overflow

Overview A vulnerability in the Adobe Flash Player could allow a remote attacker to execute arbitrary code on an affected system. Description Adobe Flash Player is a player for the Flash media format and enables frame-based animations with sound to be viewed within a web browser. An integer...

CVE-2007-3662

Media Player Classic MPC 6.4.9.0 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted FLV file...

Code injection

Media Player Classic MPC 6.4.9.0 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted FLV file...

CVE-2007-3662

The CVE-2007-3662 entry affects Media Player Classic (MPC) 6.4.9.0 . It allows a user-assisted remote attacker to trigger a denial of service and potentially execute arbitrary code by opening a crafted FLV file . No exploitation details or patch information are provided in the connected documents...

CVE-2007-3662

Media Player Classic MPC 6.4.9.0 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted FLV file...

CVE-2006-3625

FLV Players 8 allows remote attackers to obtain sensitive information via 1 a direct request to paginate.php or 2 an invalid p parameter to player.php, which reveal the path in an error message...

CVE-2006-3624

Multiple cross-site scripting XSS vulnerabilities in FLV Players 8 allow remote attackers to inject arbitrary web script or HTML via the url parameter to 1 player.php or 2 popup.php...

CVE-2006-3625

Summary of public records : CVE-2006-3625 corresponds to a race condition in the Linux kernel process filesystem that can lead to privilege escalation. Public disclosures (DSA 1111-1/DSA 1111-2) from Debian specify that kernels in the 2.6.8 series were affected and provide architecture-specific f...

CVE-2006-3624

CVE-2006-3624 documents multiple cross-site scripting (XSS) vulnerabilities in FLV Players 8 . The issue is triggered by the url parameter to either player.php or popup.php , allowing remote injection of arbitrary script/HTML. NVD reports a CVSSv2 base score of 4.3 (MEDIUM) with network attack ve...

CVE-2006-3624

Multiple cross-site scripting XSS vulnerabilities in FLV Players 8 allow remote attackers to inject arbitrary web script or HTML via the url parameter to 1 player.php or 2 popup.php...

CVE-2006-3625

FLV Players 8 allows remote attackers to obtain sensitive information via 1 a direct request to paginate.php or 2 an invalid p parameter to player.php, which reveal the path in an error message...

FLVPlayer8.txt

Produce : FLV Players 8 Website : http://www.videospark.com + Fullpath Disclosure : 1 http://localhost/flv8/paginate.php Fatal error: Class simplepagemaker: Cannot inherit from undefined class object in /var/www/zero/httpdocs/flv8/paginate.php on line 45 2...