Debian DLA-515-1 : libav security update

It was discovered that there was a memory corruption issue in libav a multimedia player, server, encoder and transcoder when parsing .mp4 files which could lead to crash or possibly execute arbitrary code. For Debian 7 'Wheezy', this issue has been fixed in libav version 6:0.8.17-2+deb7u2. We...

[SECURITY] [DLA 515-1] libav security update

Package : libav Version : 6:0.8.17-2+deb7u2 CVE ID : CVE-2016-3062 It was discovered that there was a memory corruption issue in libav a multimedia player, server, encoder and transcoder when parsing .mp4 files which could lead to crash or possibly execute arbitrary code. For Debian 7 "Wheezy",...

DLA-515-1 libav - security update

Bulletin has no description...

Adobe Flash - .MP4 Stack Corruption

Adobe Flash - .MP4 Stack Corruption Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=760 The attached mp4 file causes stack corruption in flash. To load, put LoadMP42.swf on a server and load http://127.0.0.1/LoadMP42.swf?file=t.mp4. Proof of Concept:...

Adobe Flash - '.MP4' Stack Corruption

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=760 The attached mp4 file causes stack corruption in flash. To load, put LoadMP42.swf on a server and load http://127.0.0.1/LoadMP42.swf?file=t.mp4. Proof of Concept:...

Adobe Flash - MP4 File Stack Corruption

Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=760 The attached mp4 file causes stack corruption in flash. To load, put LoadMP42.swf on a server and load http://127.0.0.1/LoadMP42.swf?file=t.mp4. Proof of Concept:...

Metaphor - Stagefright with ASLR bypass

Metaphor - Stagefright with ASLR bypass By Hanan Be'er from NorthBit Ltd. Link to whitepaper: https://raw.githubusercontent.com/NorthBit/Public/master/NorthBit-Metaphor.pdf Metaphor's source code is now released! The source include a PoC that generates MP4 exploits in real-time and bypassing ASLR...

VLC Media Player < 2.2.2 Multiple Vulnerabilities

Binary data 9267.prm...

Simple MP4 Video Player - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Simple MP4 Video Player published at the 'play' market has multiple vulnerabilities...

MKV Amp Player (MP4, DVD) - BSD license, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application MKV Amp Player MP4, DVD published at the 'play' market has multiple vulnerabilities...

Google Android 5.0.1 - Metaphor Stagefright (ASLR Bypass)

Google Android 5.0.1 - Metaphor Stagefright ASLR Bypass Source: https://github.com/NorthBit/Metaphor Metaphor - Stagefright with ASLR bypass By Hanan Be'er from NorthBit Ltd. Link to whitepaper: https://raw.githubusercontent.com/NorthBit/Public/master/NorthBit-Metaphor.pdf Twitter:...

Adobe AIR < 21.0.0.176 Multiple Vulnerabilities (APSB16-08)

Binary data 9177.prm...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Symantec Endpoint Protection Manager SEPM 12.1 before RU6-MP4 allows remote authenticated users to hijack the authentication of administrators for requests that execute arbitrary code by adding lines to a logging script...

CVE-2015-8153

Symantec Endpoint Protection Manager (SEPM) 12.1 prior to RU6-MP4 is affected by CVE-2015-8153 (SQL injection). Interfaces with the SEPM backend allow a remote authenticated attacker to execute arbitrary SQL via unspecified vectors, potentially impacting data confidentiality, integrity, and avail...

openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2016:0731-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Adobe Flash MPEG-4 Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within MPEG-4 parsing. A...

Adobe Flash MPEG Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within MPEG-4 parsing. A...

Adobe Flash MPEG-4 Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within MPEG-4 parsing. A...

libquicktime 1.2.4 - Integer Overflow

libquicktime 1.2.4 - Integer Overflow !/usr/bin/env python - 7 February 2016 - My last bug hunting session for fun and no-profit has been dedicated to libquicktime Author: Marco Romano - @nemux http://www.nemux.org libquicktime 1.2.4 Integer Overflow Product Page:...

libquicktime 1.2.4 Integer Overflow

!/usr/bin/env python - 7 February 2016 - My last bug hunting session for fun and no-profit has been dedicated to libquicktime Author: Marco Romano - @nemux http://www.nemux.org libquicktime 1.2.4 Integer Overflow Product Page: http://libquicktime.sourceforge.net/ Description: 'hdlr', 'stsd', 'fta...