CVE-2017-9126

The quicktimereaddreftable function in dref.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash via a crafted mp4 file...

CVE-2017-9127

The quicktimeuseratomsreadatom function in useratoms.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash via a crafted mp4 file...

libquicktime 1.2.4 - Denial of Service

libquicktime 1.2.4 - Denial of Service libquicktime multiple vulnerabilities ================ Author : qflb.wu =============== Introduction: ============= The libquicktime package contains the libquicktime library, various plugins and codecs, along with graphical and command line utilities used f...

libquicktime Denial of Service Vulnerability

libquicktime is a library for reading and writing files in quicktime, avi and mp4 formats. A security vulnerability exists in the 'quicktimereadmoov' function in the moov.c file in libquicktime version 1.2.4. A remote attacker can exploit this vulnerability to cause a denial of service infinite...

libquicktime Denial of Service Vulnerability (CNVD-2017-11757)

libquicktime is a library for reading and writing files in quicktime, avi and mp4 formats. A security vulnerability exists in the 'quicktimematch32' function in the util.c file in libquicktime version 1.2.4. A remote attacker can exploit this vulnerability to cause a denial of service null pointe...

libquicktime Denial of Service Vulnerability (CNVD-2017-11756)

libquicktime is a library for reading and writing files in quicktime, avi and mp4 formats. A security vulnerability exists in the 'lqtframeduration' function of the lqtquicktime.c file in libquicktime version 1.2.4. A remote attacker can exploit this vulnerability to cause a denial of service hea...

libquicktime Denial of Service Vulnerability (CNVD-2017-11755)

libquicktime is a library for reading and writing files in quicktime, avi and mp4 formats. A security vulnerability exists in the 'quicktimereaddreftable' function in the dref.c file in libquicktime version 1.2.4. A remote attacker can exploit this vulnerability to cause a denial of service heap...

libquicktime Denial of Service Vulnerability (CNVD-2017-11758)

libquicktime is a library for reading and writing files in quicktime, avi and mp4 formats. A security vulnerability exists in the 'lqtframeduration' function of the lqtquicktime.c file in libquicktime version 1.2.4. A remote attacker can exploit this vulnerability to cause a denial of service...

Denial of service

RealPlayer 16.0.2.32 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mp4 file...

CVE-2017-9302

RealPlayer 16.0.2.32 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mp4 file...

CVE-2017-9302

RealPlayer 16.0.2.32 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mp4 file...

CVE-2017-9302

RealPlayer 16.0.2.32 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mp4 file...

CVE-2017-9302

CVE-2017-9302 affects RealPlayer 16.0.2.32, where a crafted MP4 file can trigger a divide-by-zero error in the player’s handling, leading to a denial of service and application crash. Multiple sources corroborate a DoS impact via specially crafted MP4 input, with the NVD noting a network-exposed ...

KLA11033 Denial of service vulnerability in RealPlayer

A divide-by-zero vulnerability was found in the RealPlayer. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via specially designed MP4 file. Original advisories Divided RealPlayer 16.0.2.32 RealPlayer Homepage Related...

SUSE-SU-2017:1010-1 Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues: - A crafted aac audio file could have caused an invalid read and thus corruption or denial of service bsc1024014, CVE-2016-10198 - A crafted mp4 file could have caused an invalid read and thus corruption or denial of service...

Dropbox: avrecode: global-buffer-overflow in get_neighbor()

Source: https://github.com/dropbox/avrecode Version: 2de743d Built using the Github instructions with afl-gcc and ASAN. Feeding this malformed .mp4 to recode triggers a global buffer overflow. ./recode roundtrip test003.mp4 mov,mp4,m4a,3gp,3g2,mj2 @ 0x61b00001f180 Protocol name not provided, cann...

Updated libquicktime packages fix security vulnerability

Integer overflow in the quicktimereadpascal function in libquicktime 1.2.4 and earlier allows remote attackers to cause a denial of service or possibly have other unspecified impact via a crafted hdlr MP4 atom. CVE-2016-2399...

Google Chrome < 57.0.2987.98 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 57.0.2987.98. It is, therefore, affected by multiple vulnerabilities as referenced in the 201703stable-channel-update-for-desktop advisory. - An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac,...

Easy MOV Converter 1.4.24 - Local Buffer Overflow (SEH)

Easy MOV Converter 1.4.24 - Local Buffer Overflow SEH !/usr/bin/python Exploit Title : Easy MOV Converter - 'Enter User Name' Field SEH Overwrite POC Date : 12/03/2017 Exploit Author : Muhann4d Vendor Homepage : http://www.divxtodvd.net/ Software Link : http://www.divxtodvd.net/easymovconverter.e...

SUSE-SU-2017:0624-1 Security update for libquicktime

This update for libquicktime fixes the following issues: - A crafted MP4 file could have caused libquicktime to crash or lead to undefined behaviour bsc1022805, CVE-2016-2399...