CVE-2015-0813

CVE-2015-0813 is a use-after-free in Mozilla Firefox (AppendElements) triggered when processing MP3 files via the Fluendo MP3 plugin for GStreamer on Linux. This can allow remote code execution or a heap-based denial of service. Affected: Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thu...

CVE-2015-0813

Use-after-free vulnerability in the AppendElements function in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 on Linux, when the Fluendo MP3 plugin for GStreamer is used, allows remote attackers to execute arbitrary code or cause a denial of service heap...

Mozilla: Use-after-free when using the Fluendo MP3 GStreamer plugin (MFSA 2015-31)

Use-after-free vulnerability in the AppendElements function in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 on Linux, when the Fluendo MP3 plugin for GStreamer is used, allows remote attackers to execute arbitrary code or cause a denial of service heap...

CVE-2015-0813

Use-after-free vulnerability in the AppendElements function in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 on Linux, when the Fluendo MP3 plugin for GStreamer is used, allows remote attackers to execute arbitrary code or cause a denial of service heap...

Use-after-free when using the Fluendo MP3 GStreamer plugin — Mozilla

Security researcher Aki Helin reported a use-after-free when playing certain MP3 format audio files on the web using the Fluendo MP3 plugin for GStreamer on Linux. This is due to a flaw in handling certain MP3 files by the plugin and its interaction with Mozilla code. This can lead to a potential...

openSUSE Security Update : seamonkey (openSUSE-SU-2015:0192-1)

Mozilla seamonkey was updated to SeaMonkey 2.32 bnc910669 - MFSA 2015-01/CVE-2014-8634/CVE-2014-8635 Miscellaneous memory safety hazards - MFSA 2015-02/CVE-2014-8637 bmo1094536 Uninitialized memory use during bitmap rendering - MFSA 2015-03/CVE-2014-8638 bmo1080987 sendBeacon requests lack an...

openSUSE: Security Advisory for seamonkey (openSUSE-SU-2015:0192-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for seamonkey (important)

Mozilla seamonkey was updated to SeaMonkey 2.32 bnc910669 MFSA 2015-01/CVE-2014-8634/CVE-2014-8635 Miscellaneous memory safety hazards MFSA 2015-02/CVE-2014-8637 bmo1094536 Uninitialized memory use during bitmap rendering MFSA 2015-03/CVE-2014-8638 bmo1080987 sendBeacon requests lack an Origin...

Heap overflow

The Gst.MapInfo function in Vala 0.26.0 and 0.26.1 uses an incorrect buffer length declaration for the Gstreamer bindings, which allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via unspecified vectors, which trigger a heap-based buffer...

CVE-2014-8154

The Gst.MapInfo function in Vala 0.26.0 and 0.26.1 uses an incorrect buffer length declaration for the Gstreamer bindings, which allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via unspecified vectors, which trigger a heap-based buffer...

CVE-2014-8154

The Gst.MapInfo function in Vala 0.26.0 and 0.26.1 uses an incorrect buffer length declaration for the Gstreamer bindings, which allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via unspecified vectors, which trigger a heap-based buffer...

CVE-2014-8154

CVE-2014-8154 affects Vala 0.26.0 and 0.26.1, where Gst.MapInfo uses an incorrect buffer length declaration in the Gstreamer bindings. This leads to a heap-based buffer overflow that could enable a context-dependent attacker to cause a denial of service (crash) and possibly execute arbitrary code...

CVE-2014-8154

The Gst.MapInfo function in Vala 0.26.0 and 0.26.1 uses an incorrect buffer length declaration for the Gstreamer bindings, which allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via unspecified vectors, which trigger a heap-based buffer...

openSUSE Security Update : MozillaFirefox (openSUSE-SU-2014:1581-1)

This MozillaFirefox update fixes several security and non security issues. Changes in MozillaFirefox : - update to Firefox 34.0.5 bnc908009 - Default search engine changed to Yahoo! for North America - Default search engine changed to Yandex for Belarusian, Kazakh, and Russian locales - Improved...

openSUSE Security Update : pidgin (openSUSE-SU-2014:1397-1)

Update to version 2.10.10 : + General : - Check the basic constraints extension when validating SSL/TLS certificates. This fixes a security hole that allowed a malicious man-in-the-middle to impersonate an IM server or any other https endpoint. This affected both the NSS and GnuTLS plugins...

[SECURITY] Fedora 20 Update: gstreamer1-plugins-good-1.2.4-2.fc20

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

Totem Movie Player (Ubuntu) 3.4.3 Stack Corruption

No description provided by source. Title : Totem movie playerUbuntustack corruption Version : 3.4.3 GStreamer 0.10.36 Date : 2012-12-15 Vendor : http://projects.gnome.org/totem/index.html Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : Ubuntu 12.10 desktop 32...

xine-lib - Multiple Heap Based Remote Buffer Overflow Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/28370/info The 'xine-lib' library is prone to multiple heap-based buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied input. Attackers can exploit these issues to execute...

GStreamer 0.10.15 Multiple Unspecified Remote Denial of Service Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/27249/info GStreamer is prone to multiple unspecified denial-of-service vulnerabilities when handling malformed media files. Successfully exploiting this issue allows remote attackers to deny service to legitimate users...

openSUSE Security Update : MozillaThunderbird (openSUSE-SU-2013:1495-1)

This MozillaThunderbird update to version 24.0 fixes several security and non-security issues : - update to Thunderbird 24.0 bnc840485 - MFSA 2013-76/CVE-2013-1718/CVE-2013-1719 Miscellaneous memory safety hazards - MFSA 2013-77/CVE-2013-1720 bmo888820 Improper state in HTML5 Tree Builder with...