2286 matches found
CVE-2017-11282
Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier...
Memory corruption
Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier...
UBUNTU-CVE-2017-11282
Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier...
CVE-2017-11282
Adobe Flash Player contains a memory corruption vulnerability (CVE-2017-11282) in the MP4 atom parser that could allow remote arbitrary code execution. Affected versions are 26.0.0.151 and earlier. Multiple connected advisories confirm the issue and note that a fix exists in version 27.0.0.130 or...
CVE-2017-11282
Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier...
CVE-2017-15672
The readheader function in libavcodec/ffv1dec.c in FFmpeg 2.4 and 3.3.4 and possibly earlier allows remote attackers to have unspecified impact via a crafted MP4 file, which triggers an out-of-bounds read...
UBUNTU-CVE-2017-15672
The readheader function in libavcodec/ffv1dec.c in FFmpeg 2.4 and 3.3.4 and possibly earlier allows remote attackers to have unspecified impact via a crafted MP4 file, which triggers an out-of-bounds read...
CVE-2017-15672
The readheader function in libavcodec/ffv1dec.c in FFmpeg 2.4 and 3.3.4 and possibly earlier allows remote attackers to have unspecified impact via a crafted MP4 file, which triggers an out-of-bounds read...
CVE-2017-15672
The readheader function in libavcodec/ffv1dec.c in FFmpeg 2.4 and 3.3.4 and possibly earlier allows remote attackers to have unspecified impact via a crafted MP4 file, which triggers an out-of-bounds read...
Out-of-bounds
The readheader function in libavcodec/ffv1dec.c in FFmpeg 2.4 and 3.3.4 and possibly earlier allows remote attackers to have unspecified impact via a crafted MP4 file, which triggers an out-of-bounds read...
CVE-2017-15672
CVE-2017-15672 affects FFmpeg’s libavcodec/ffv1dec.c: a crafted MP4 file can trigger an out-of-bounds read, impacting FFmpeg 2.4/3.3.4 (and possibly earlier). Connected advisories confirm the vulnerability and document fixes in later FFmpeg releases (e.g., openSUSE openSUSE-2018-172 patching to 3...
CVE-2017-15672
The readheader function in libavcodec/ffv1dec.c in FFmpeg 2.4 and 3.3.4 and possibly earlier allows remote attackers to have unspecified impact via a crafted MP4 file, which triggers an out-of-bounds read...
Out-Of-Bounds Read
ffmpeg is vulnerable to out-of-bound reads. It happens because there is a discrepancy in the bufsize used to calculate “bytestreamend” and the “size” returned from the AVRB24 function. A malicious user can pass a mp4 file to the system to trigger an out of array read...
Google Chrome heap buffer overflow vulnerability (CNVD-2017-30922)
Google Chrome is a web browser developed by the American company Google Google. A heap buffer overflow vulnerability exists in Google Chrome versions prior to M40. A remote attacker can exploit this vulnerability to cause a denial of service process crash with the help of a specially crafted MP4...
CVE-2017-14160
The barknoisehybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service out-of-bounds access and application crash or possibly have unspecified other impact via a crafted mp4 file...
CVE-2015-1206
Heap-based buffer overflow in Google Chrome before M40 allows remote attackers to cause a denial of service unpaged memory write and process crash via a crafted MP4 file...
Heap overflow
Heap-based buffer overflow in Google Chrome before M40 allows remote attackers to cause a denial of service unpaged memory write and process crash via a crafted MP4 file...
CVE-2015-1206
Heap-based buffer overflow in Google Chrome before M40 allows remote attackers to cause a denial of service unpaged memory write and process crash via a crafted MP4 file...
CVE-2015-1206
CVE-2015-1206 affects Google Chrome prior to M40, where a heap-based buffer overflow in the MP4 handling path allows remote attackers to trigger a denial of service (unpaged memory write and process crash) via a crafted MP4 file. The available documents confirm the vulnerable component and impact...