FreeBSD : VLC -- Heap corruption in MP4 demultiplexer (6a4bfe75-692a-11e0-bce7-001eecdd401a)

VideoLAN project reports : When parsing some MP4 MPEG-4 Part 14 files, insufficient buffer size might lead to corruption of the heap. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database :...

[SECURITY] [DSA 2218-1] vlc security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2218-1 [email protected] http://www.debian.org/security/ Nico Golde April 12, 2011 http://www.debian.org/security/faq -...

VLC mediaplayer buffer overflow

Heap oveflow on MP4 parsing...

VLC Media Player 'MP4'堆缓冲区溢出漏洞

Bugtraq ID: 47293 VLC Media Player是一款流行的多媒体播放程序。 modules/demux/mp4/libmp4.c提供的"MP4ReadBoxskcr"函数存在错误，远程攻击者可以构建恶意MP4文件，诱使用户解析，触发缓冲区溢出，成功利用漏洞可以以应用程序安全上下文执行任意代码。 VideoLAN VLC media player 1.1.8 厂商解决方案 VideoLAN VLC media player 1.1.9已经修复此漏洞，建议用户下载使用： http://www.videolan.org/...

Debian DSA-2218-1 : vlc - heap-based buffer overflow

Aliz Hammond discovered that the MP4 decoder plugin of VLC, a multimedia player and streamer, is vulnerable to a heap-based buffer overflow. This has been introduced by a wrong data type being used for a size calculation. An attacker could use this flaw to trick a victim into opening a specially...

DSA-2218-1 vlc - heap-based buffer overflow

Bulletin has no description...

VLC -- Heap corruption in MP4 demultiplexer

VideoLAN project reports: When parsing some MP4 MPEG-4 Part 14 files, insufficient buffer size might lead to corruption of the heap...

AoA MP4 Converter 4.1.0 ActiveX Stack Overflow

Exploit Title: AoA Mp4 converter v4.1.0 Activex Date: Febrary 07 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://www.aoamedia.com/AoAMP4Converter.exe Version: v4.1.0 Tested on: Windows xp sp3 running on VMware Fusion 3.1 and VirtualBox 3.2.8 mail---- shogilord^gmail.com spams are...

AoA Mp4 converter v4.1.0 ActiveX Stack Overflow Exploit

Exploit for windows platform in category local exploits Exploit Title: AoA Mp4 converter v4.1.0 Activex Date: Febrary 07 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://www.aoamedia.com/AoAMP4Converter.exe Version: v4.1.0 Tested on: Windows xp sp3 running on VMware Fusion 3.1 and...

AoA DVD Creator V2.5 ActiveX Stack Overflow Exploit

Exploit for windows platform in category local exploits Exploit Title: AoA Mp4 converter v4.1.0 Activex Date: Febrary 07 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://www.aoamedia.com/AoAMP4Converter.exe Version: v4.1.0 Tested on: Windows xp sp3 running on VMware Fusion 3.1 and...

AoA Mp4 Converter 4.1.0 - ActiveX Stack Overflow

AoA Mp4 Converter 4.1.0 - ActiveX Stack Overflow Exploit Title: AoA Mp4 converter v4.1.0 Activex Date: Febrary 07 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://www.aoamedia.com/AoAMP4Converter.exe Version: v4.1.0 Tested on: Windows xp sp3 running on VMware Fusion 3.1 and...

AoA Mp4 Converter 4.1.0 - ActiveX Stack Overflow

Exploit Title: AoA Mp4 converter v4.1.0 Activex Date: Febrary 07 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://www.aoamedia.com/AoAMP4Converter.exe Version: v4.1.0 Tested on: Windows xp sp3 running on VMware Fusion 3.1 and VirtualBox 3.2.8 mail---- shogilord^gmail.com spams are...

CVE-2010-4373

The inmp4 plugin in Winamp before 5.6 allows remote attackers to cause a denial of service application crash via crafted 1 metadata or 2 albumart in an invalid MP4 file...

Design/Logic Flaw

The inmp4 plugin in Winamp before 5.6 allows remote attackers to cause a denial of service application crash via crafted 1 metadata or 2 albumart in an invalid MP4 file...

CVE-2010-4373

The inmp4 plugin in Winamp before 5.6 allows remote attackers to cause a denial of service application crash via crafted 1 metadata or 2 albumart in an invalid MP4 file...

CVE-2010-4373

CVE-2010-4373 affects Winamp

KLA10305 ACE vulnerabilities in RealPage Module Upload

A buffer overflow was found in RealPlayer. By exploiting this vulnerability malicious users can execute arbitrary files. This vulnerability can be exploited remotely via a specially designed MP4 file. Original advisories - Related products...

RealNetworks RealPlayer Multiple Vulnerabilities - Windows

RealPlayer is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-0117

RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows do not properly handle dimensions during YUV420 transformations, which might allow remote attackers to execute arbitrary code via crafted MP4 content...

Code injection

RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows do not properly handle dimensions during YUV420 transformations, which might allow remote attackers to execute arbitrary code via crafted MP4 content...