libquicktime 1.2.4 - Integer Overflow

Exploit for multiple platform in category dos / poc !/usr/bin/env python - 7 February 2016 - My last bug hunting session for fun and no-profit has been dedicated to libquicktime Author: Marco Romano - @nemux http://www.nemux.org libquicktime 1.2.4 Integer Overflow Product Page:...

libquicktime 1.2.4 - Integer Overflow

!/usr/bin/env python - 7 February 2016 - My last bug hunting session for fun and no-profit has been dedicated to libquicktime Author: Marco Romano - @nemux http://www.nemux.org libquicktime 1.2.4 Integer Overflow Product Page: http://libquicktime.sourceforge.net/ Description: 'hdlr', 'stsd', 'fta...

Mozilla Firefox < 44.0 Multiple Vulnerabilities

Binary data 9075.prm...

Adobe Flash - Processing AVC Causes Stack Corruption

Adobe Flash - Processing AVC Causes Stack Corruption Source: https://code.google.com/p/google-security-research/issues/detail?id=634 The attached mp4 file causes stack corruption in Flash. To run the test, load LoadMP42.swf?file=null.mp4 from a remote server. Proof of Concept:...

Adobe Flash - Processing AVC Causes Stack Corruption

Source: https://code.google.com/p/google-security-research/issues/detail?id=634 The attached mp4 file causes stack corruption in Flash. To run the test, load LoadMP42.swf?file=null.mp4 from a remote server. Proof of Concept:...

Adobe Flash - Processing AVC Causes Stack Corruption

Exploit for multiple platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=634 The attached mp4 file causes stack corruption in Flash. To run the test, load LoadMP42.swf?file=null.mp4 from a remote server. Proof of Concept:...

openSUSE Security Update : seamonkey (openSUSE-2016-126) (SLOTH)

SeaMonkey was updated to 2.40 boo959277 to fix security issues and bugs. The following vulnerabilities were fixed : - CVE-2015-7575: MD5 signatures accepted within TLS 1.2 ServerKeyExchange in server signature - CVE-2015-7201/CVE-2015-7202: Miscellaneous memory safety hazards - CVE-2015-7204: Cra...

Apple QuickTime MP4 Absent stbl Box Memory Corruption (CVE-2015-3667)

A memory corruption vulnerability has been reported in Apple QuickTime. The vulnerability is due to an issue with processing corrupted MPEG-4 MP4 files. A remote attacker could exploit this vulnerability by enticing a user to open a malicious .MP4 file. Successful exploitation could lead to...

Ubuntu 14.04 LTS : Thunderbird vulnerabilities (USN-2859-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2859-1 advisory. Andrei Vaida, Jesse Ruderman, Bob Clary, and Jesse Ruderman discovered multiple memory safety issues in Thunderbird. If a user were tricked in to opening...

Flash Player < 20.0.0.228 Multiple Vulnerabilities (APSB15-32)

Binary data 9040.prm...

Mozilla: Integer overflow in MP4 playback in 64-bit versions (MFSA 2015-146)

Integer overflow in the MPEG4Extractor::readMetaData function in MPEG4Extractor.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 on 64-bit platforms allows remote attackers to execute arbitrary code via a crafted MP4 video file that triggers a buffer overflow...

openSUSE Security Update : Mozilla Thunderbird (openSUSE-2015-977)

Mozilla Thunderbird was updated to 38.5.0 to fix multiple security issues. The following vulnerabilities were fixed: boo959277 - CVE-2015-7201: Miscellaneous memory safety hazards - CVE-2015-7210: Use-after-free in WebRTC when datachannel is used after being destroyed - CVE-2015-7212: Integer...

Security update for Mozilla Thunderbird (important)

Mozilla Thunderbird was updated to 38.5.0 to fix multiple security issues. The following vulnerabilities were fixed: boo959277 CVE-2015-7201: Miscellaneous memory safety hazards CVE-2015-7210: Use-after-free in WebRTC when datachannel is used after being destroyed CVE-2015-7212: Integer overflow...

Vulnerability of Firefox and Firefox ESR browsers, allowing attackers to execute arbitrary code

The vulnerability of the MPEG4Extractor::readMetaData function located in MPEG4Extractor.cpp, within libstagefright in Firefox and Firefox ESR browsers is related to a potential overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially crafte...

Security update for xulrunner (important)

Xulrunner was updated to 38.5.0 to fix several security issues. The following vulnerabilities were fixed boo959277: CVE-2015-7201: Miscellaneous memory safety hazards CVE-2015-7210: Use-after-free in WebRTC when datachannel is used after being destroyed CVE-2015-7212: Integer overflow allocating...

Updated firefox packages fix security vulnerabilities

Updated firefox packages fix security vulnerabilities: Multiple memory safety issues in Firefox were discovered. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary...

Mozilla: Integer overflow in MP4 playback in 64-bit versions (MFSA 2015-146)

Integer overflow in the MPEG4Extractor::readMetaData function in MPEG4Extractor.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 on 64-bit platforms allows remote attackers to execute arbitrary code via a crafted MP4 video file that triggers a buffer overflow...

CVE-2015-7222

Integer underflow in the Metadata::setData function in MetaData.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary code or cause a denial of service incorrect memory allocation and application crash via an MP4 video...

CVE-2015-7213

Integer overflow in the MPEG4Extractor::readMetaData function in MPEG4Extractor.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 on 64-bit platforms allows remote attackers to execute arbitrary code via a crafted MP4 video file that triggers a buffer overflow...

Integer overflow

Integer overflow in the MPEG4Extractor::readMetaData function in MPEG4Extractor.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 on 64-bit platforms allows remote attackers to execute arbitrary code via a crafted MP4 video file that triggers a buffer overflow...