988 matches found
CVE-2011-3458
CVE-2011-3458 affects Apple QuickTime on macOS (OS X) prior to 10.7.3. The flaw is an uninitialized memory access during parsing of certain MP4 headers, allowing remote attackers to execute arbitrary code or cause an application crash via a crafted MP4 file. The impact is demonstrated as remote c...
CVE-2011-3458: Undefined Security Weakness
QuickTime in Apple Mac OS X before 10.7.3 does not prevent access to uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MP4 file...
CVE-2011-4262
Unspecified vulnerability in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted MP4 file...
CVE-2011-4261
RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via crafted video dimensions in an MP4 file...
Memory corruption
RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via crafted video dimensions in an MP4 file...
Code injection
Unspecified vulnerability in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted MP4 file...
CVE-2011-4262
Unspecified vulnerability in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted MP4 file...
CVE-2011-4261
CVE-2011-4261 affects RealNetworks RealPlayer prior to 15.0.0. The vulnerability in the MP4/esds width handling inside the dmp4 component can cause heap memory corruption, potentially enabling remote code execution. Public sources describe an in‑the‑wild risk requiring user interaction (per ZDI a...
CVE-2011-4260
CVE-2011-4260 affects RealNetworks RealPlayer prior to version 15.0.0. The vulnerability exists in the MP4 header parsing (raac.dll) where a malformed MP4 header can trigger remote code execution. Public writeups (e.g., ZDI advisory) state an attacker can exploit by convincing a user to open a ma...
CVE-2011-4262: Undefined Security Weakness
Unspecified vulnerability in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted MP4 file...
CVE-2011-4261: Improper Restriction of Operations within the Bounds of a Memory Buffer
RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via crafted video dimensions in an MP4 file...
CVE-2011-4260: Improper Control of Generation of Code
RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a malformed header in an MP4 file...
Adobe Flash Player MP4 SequenceParameterSetNALUnit Buffer Overflow
This module exploits a vulnerability found in Adobe Flash Player's Flash10u.ocx component. When processing a MP4 file specifically the Sequence Parameter Set, Flash will see if picordercnttype is equal to 1, which sets the numrefframesinpicordercntcycle field, and then blindly copies data in...
CVE-2011-1684
Heap-based buffer overflow in the MP4ReadBoxskcr function in libmp4.c in the MP4 demultiplexer in VideoLAN VLC media player 1.x before 1.1.9 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted MP4 file...
CVE-2011-1684
Heap-based buffer overflow in the MP4ReadBoxskcr function in libmp4.c in the MP4 demultiplexer in VideoLAN VLC media player 1.x before 1.1.9 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted MP4 file...
Heap overflow
Heap-based buffer overflow in the MP4ReadBoxskcr function in libmp4.c in the MP4 demultiplexer in VideoLAN VLC media player 1.x before 1.1.9 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted MP4 file...
CVE-2011-1684
Heap-based buffer overflow in the MP4ReadBoxskcr function in libmp4.c in the MP4 demultiplexer in VideoLAN VLC media player 1.x before 1.1.9 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted MP4 file...
CVE-2011-1684
Heap-based buffer overflow in the MP4ReadBoxskcr function in libmp4.c in the MP4 demultiplexer in VideoLAN VLC media player 1.x before 1.1.9 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted MP4 file...
Design/Logic Flaw
The inmp4 plugin in Winamp before 5.6 allows remote attackers to cause a denial of service application crash via crafted 1 metadata or 2 albumart in an invalid MP4 file...