MGASA-2017-0348 Updated gstreamer0.10-plugins-good and gstreamer1.0-plugins-good packages fix security vulnerabilities

A crafted AAC audio file could have caused an invalid read and thus corruption or denial of service CVE-2016-10198. A crafted mp4 file could have caused an invalid read and thus corruption or denial of service CVE-2016-10199. A crafted AVI file could have caused an invalid read and thus corruptio...

Memory Corruption Vulnerability in Sohu Video Player mp4splitter Module

Sohu Video 5 is a video player from Sohu. Sohu Video Player suffers from a memory corruption vulnerability in the mp4splitter module when opening certain MP4 files, which can be exploited by an attacker to cause a denial of service...

Null Pointer Reference Vulnerability in QQ Video

QQ Video is a local player from Tencent that supports movie and music files in any format. A null pointer reference vulnerability exists in the QQ AV player when parsing MP4 files of a specific format, which can be exploited by an attacker to cause a denial of service...

Memory Corruption Vulnerability in Youku PC Player

Youku PC Player is a video player for Youku.com. A memory corruption vulnerability exists in YoukuNplayer.exe when parsing special mp4 files, which can be exploited by attackers to cause a denial of service...

September 19, 2017—KB4038803 (Preview of Monthly Rollup)

None None...

flash-plugin: multiple code execution issues fixed in APSB17-28

Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier...

CVE-2017-11282

Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier...

Adobe Flash Player Memory Corruption (APSB17-28: CVE-2017-11281)

A memory corruption vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted mp4 file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted mp4 file...

Bento4 Core/Ap4AtomSampleTable.cpp file buffer overflow vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A buffer overflow vulnerability exists in AP4AtomSampleTable::GetSample in the Core/Ap4AtomSampleTable.cpp file of the SDK in Bento4 version 1.5.0-616. A remote attacker can exploit this vulnerability to cause a denial of...

Bento4 Ap4StszAtom.cpp file buffer overflow vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A buffer overflow vulnerability exists in the AP4StszAtom class of the Ap4StszAtom.cpp file of the SDK in Bento4 version 1.5.0-616. A remote attacker can exploit this vulnerability to cause a denial of service or execute...

CVE-2017-14260

In the SDK in Bento4 1.5.0-616, the AP4StssAtom class in Ap4StssAtom.cpp contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file...

Design/Logic Flaw

In the SDK in Bento4 1.5.0-616, the AP4StssAtom class in Ap4StssAtom.cpp contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file...

Design/Logic Flaw

In the SDK in Bento4 1.5.0-616, the AP4StszAtom class in Ap4StszAtom.cpp file contains a Read Memory Access Violation vulnerability. It is possible to exploit this vulnerability by opening a crafted .MP4 file...

CVE-2017-14259

In the SDK in Bento4 1.5.0-616, the AP4StscAtom class in Ap4StscAtom.cpp contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file...

CVE-2017-14257

In the SDK in Bento4 1.5.0-616, AP4AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp contains a Read Memory Access Violation vulnerability. It is possible to exploit this vulnerability by opening a crafted .MP4 file...

CVE-2017-14258

In the SDK in Bento4 1.5.0-616, SetItemCount in Core/Ap4StscAtom.h file contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file...

CVE-2017-14258

In the SDK in Bento4 1.5.0-616, SetItemCount in Core/Ap4StscAtom.h file contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file...

CVE-2017-14257

In the SDK in Bento4 1.5.0-616, AP4AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp contains a Read Memory Access Violation vulnerability. It is possible to exploit this vulnerability by opening a crafted .MP4 file...

CVE-2017-14258

In the SDK in Bento4 1.5.0-616, SetItemCount in Core/Ap4StscAtom.h file contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file...

Design/Logic Flaw

In the SDK in Bento4 1.5.0-616, SetItemCount in Core/Ap4StscAtom.h file contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file...