CVE-2013-0869

The fieldend function in libavcodec/h264.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted H.264 data, related to an SPS and slice mismatch and an out-of-bounds array access...

CVE-2013-0867

The decodesliceheader function in libavcodec/h264.c in FFmpeg before 1.1.2 does not properly check when the pixel format changes, which allows remote attackers to have unspecified impact via crafted H.264 video data, related to an out-of-bounds array access...

CVE-2013-0869

The fieldend function in libavcodec/h264.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted H.264 data, related to an SPS and slice mismatch and an out-of-bounds array access...

CVE-2013-0869

The fieldend function in libavcodec/h264.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted H.264 data, related to an SPS and slice mismatch and an out-of-bounds array access...

CVE-2013-0869

FFmpeg before 1.1.2 is vulnerable to a denial-of-service via field_end() in libavcodec/h264.c when processing crafted H.264 data (SPS/slice mismatch and out-of-bounds access). A patch was released with FFmpeg 1.1.2 and later versions to fix the issue; upgrade to 1.1.2+ or apply the vendor patch. ...

CVE-2013-0867

FFmpeg vulnerability CVE-2013-0867: the decode_slice_header function in libavcodec/h264.c before 1.1.2 does not properly validate when the pixel format changes, allowing a remote attacker to trigger an unspecified impact via crafted H.264 video data, related to an out-of-bounds array access. Affe...

PT-2013-2665

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.2 Description The issue is related to the decode slice header function in libavcodec/h264.c, which does not properly check when the pixel format changes. This allows remote attackers to have an unspecified impact v...

CVE-2013-0869: Improper Restriction of Operations within the Bounds of a Memory Buffer

The fieldend function in libavcodec/h264.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted H.264 data, related to an SPS and slice mismatch and an out-of-bounds array access...

PT-2013-2667

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.2 Description The issue is related to an out-of-bounds array access in the field end function in libavcodec/h264.c, which can be triggered by crafted H.264 data, specifically when there is an SPS and slice mismatch...

PT-2013-1092

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1 Description The issue is related to the decode slice header function in libavcodec/h264.c, which allows remote attackers to have an impact via crafted H.264 data, triggering an out-of-bounds array access. Multiple...

Antivirus firm ESET and BitDefender website Hijacked by Pro-Palestinian Hackers

A pro-Palestinian hacktivist group 'KDMS Team', who recently managed to briefly hijack the Metasploit website of security firm Rapid7 and become popular after Hacking World's largest Web Hosting Network Leaseweb website and antivirus vendors AVG, Avira as well as mobile messaging service WhatsApp...

CVE-2013-3969

The find prototype in scripting/enginev8.h in MongoDB 2.4.0 through 2.4.4 allows remote authenticated users to cause a denial of service uninitialized pointer dereference and server crash or possibly execute arbitrary code via an invalid RefDB object...

CVE-2013-3969: Undefined Security Weakness

The find prototype in scripting/enginev8.h in MongoDB 2.4.0 through 2.4.4 allows remote authenticated users to cause a denial of service uninitialized pointer dereference and server crash or possibly execute arbitrary code via an invalid RefDB object...

PT-2013-4765

Name of the Vulnerable Software and Affected Versions MongoDB versions 2.4.0 through 2.4.4 Description The issue allows remote authenticated users to cause a denial of service or possibly execute arbitrary code via an invalid RefDB object, resulting from an uninitialized pointer dereference and...

CVE-2013-4623: Improper Input Validation

The x509parsecrt function in x509.h in PolarSSL 1.1.x before 1.1.7 and 1.2.x before 1.2.8 does not properly parse certificate messages during the SSL/TLS handshake, which allows remote attackers to cause a denial of service infinite loop and CPU consumption via a certificate message that contains...

PT-2013-1215

Name of the Vulnerable Software and Affected Versions PolarSSL versions 1.1.x through 1.1.6 PolarSSL versions 1.2.x through 1.2.7 PolarSSL versions prior to 1.3.0 Description The issue allows remote attackers to cause a denial of service, resulting in infinite loop and CPU consumption, by sending...

FFmpeg 'libavcodec'越界内存访问漏洞(CVE-2013-4358)

BUGTRAQ ID: 62440 CVECAN ID: CVE-2013-4358 FFmpeg是一个免费的可以执行音讯和视讯多种格式的录影、转档、串流功能的软件。 FFmpeg 0.11.3的libavcodec H.264代码存在安全漏洞，攻击者可利用此漏洞在受影响用户上下文中执行任意代码，越界读写。 0 FFmpeg 0.11.3 厂商补丁： FFmpeg ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://ffmpeg.org/security.html...

Pakistani hackers hit Indian Eastern Railways Website just before Independence day

Just four days before the Independence day, The Pakistani hacker known as 'MindCracker' from Pakistan Cyber Army team hacked into the Indian Eastern Railways website and deface some internal pages, as shown in the screenshot taken by us few hours before. At the time of reporting, website...

How I Got Here: Robert "Rsnake" Hansen

Dennis Fisher talks with Robert Hansen, a renowned security researcher, about his early days climbing telephone poles to clip into phone lines, how he got his start in the security world, the evolution of [email protected] from early webrings and what he’s learned along the way. Download: 07rsnake.mp3...

Apple QuickTime H.263 Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...