141 matches found
openSUSE Security Update : perl-Image-ExifTool (openSUSE-2021-707)
This update for perl-Image-ExifTool fixes the following issues : Update to version 12.25 fixes boo1185547 CVE-2021-22204 - JPEG XL support is now official - Added read support for Medical Research Council MRC image files - Added ability to write a number of 3gp tags in video files - Added a new...
Security update for perl-Image-ExifTool (important)
openSUSE Security Update: Security update for perl-Image-ExifTool Announcement ID: openSUSE-SU-2021:0707-1 Rating: important References: 1185547 Cross-References: CVE-2021-22204 CVSS scores: CVE-2021-22204 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15....
[SECURITY] Fedora 33 Update: mediainfo-21.03-1.fc33
MediaInfo CLI Command Line Interface. What information can I get from MediaInfo? General: title, author, director, album, track number, date, duration... Video: codec, aspect, fps, bitrate... Audio: codec, sample rate, channels, language, bitrate... Text: language of subtitle Chapters: number of...
[SECURITY] Fedora 30 Update: libmediainfo-19.04-1.fc30
This package contains the shared library for MediaInfo. MediaInfo supplies technical and tag information about a video or audio file. What information can I get from MediaInfo? General: title, author, director, album, track number, date, duration... Video: codec, aspect, fps, bitrate... Audio:...
DEBIAN-CVE-2015-1207
Double-free vulnerability in libavformat/mov.c in FFMPEG in Google Chrome 41.0.2251.0 allows remote attackers to cause a denial of service memory corruption and crash via a crafted .m4a file...
UBUNTU-CVE-2015-1207
Double-free vulnerability in libavformat/mov.c in FFMPEG in Google Chrome 41.0.2251.0 allows remote attackers to cause a denial of service memory corruption and crash via a crafted .m4a file...
CVE-2015-1207
Double-free vulnerability in libavformat/mov.c in FFMPEG in Google Chrome 41.0.2251.0 allows remote attackers to cause a denial of service memory corruption and crash via a crafted .m4a file...
CVE-2015-1207
Double-free vulnerability in libavformat/mov.c in FFMPEG in Google Chrome 41.0.2251.0 allows remote attackers to cause a denial of service memory corruption and crash via a crafted .m4a file...
CVE-2015-1207
CVE-2015-1207 is a double-free vulnerability in libavformat/mov.c of FFmpeg affecting Google Chrome 41.0.2251.0, exploitable via a crafted .m4a file to cause memory corruption and a denial of service. Publicly documented in OSV and Debian advisories, with Debian noting fixes in libav 6:11.12-1~de...
Apple TV < 10.2 Multiple Vulnerabilities
Binary data 700035.prm...
Apple macOS M4A Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of M4A...
Apple macOS M4A Parsing Type Confusion Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of M4A...
Free M4A To MP3 Converter 9.3 DLL Hijacking
===================================================== Exploit Title : Free M4a to MP3 Converter 9.3 - DLL Hijacking Vulnerability Date Discovered : 2016-12-19 Affected Products: Free M4a to MP3 Converter v9.3 - Software Exploitation Technique: Local Severity Level: Medium Tested OS : Windows 7...
Apple Quicktime multiple security vulnerabilities
Memory corruptions on video decoding, MIDI and m4a...
QuickTime < 7.7.6 Multiple Vulnerabilities (Windows)
The version of Apple QuickTime installed on the remote Windows host is prior to 7.7.6. It is, therefore, affected by the following vulnerabilities : - A memory corruption flaw exists when handling specially crafted RLE encoded videos due to user-supplied input not being properly sanitized...
Buffer overflow
Buffer overflow in QuickTime in Apple OS X before 10.10 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted audio samples in an m4a file...
CVE-2014-4351
CVE-2014-4351 : Apple QuickTime on macOS X before 10.10 is affected by a buffer overflow in handling of audio samples in M4A files, allowing remote code execution or a denial of service. Affected component: QuickTime (OS X). Root cause: memory corruption when parsing M4A audio samples. Impact: ar...
CVE-2014-4351
Buffer overflow in QuickTime in Apple OS X before 10.10 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted audio samples in an m4a file...
Mandriva Linux Security Advisory : xine-lib (MDVSA-2008:124)
A vulnerability in the Speex library was found where it did not properly validate input values read from the Speex files headers. An attacker could create a malicious Speex file that would crash an application or potentially allow the execution of arbitrary code with the privileges of the...
Winamp 5.07 (latest version) Remote Crash + other stupid shizle
Winamp 5.07 latest version Remote Crash. + vuln to cause 100 cpu usage. 13/12/04 I. BACKGROUND Winamp is a very popular windows audio and video player. It also has alot of other features and is used by millions of people across the world. II. DESCRIPTION VULN 1. There is a vuln in winamp's handli...