Lucene search
+L

2286 matches found

CNVD
CNVD
added 2022/03/23 12:00 a.m.18 views

Bento4 heap buffer over-read vulnerability

Bento4 is an open source C library for reading and writing MP4 files. Bento4 1.6.0-639 has a security vulnerability for which no detailed vulnerability details are available...

8.1CVSS1.2AI score0.00985EPSS
SaveExploits1References1
Huntr
Huntr
added 2022/01/31 12:56 p.m.24 views

in gpac/gpac

Description Null Pointer Dereference in gitnboxdel Proof of Concept bash echo -n AAAAEW1ldGEwMDAwMDAwMDAAAABjMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAAAAARZ2l0bjAwMDAwMDAwMA== | base64 -d poc ./MP4Box -bt ./poc...

4.3CVSS0.8AI score0.04615EPSS
SaveExploits2References1
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.23 views

Mageia: Security Advisory (MGASA-2019-0146)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.8AI score0.02264EPSS
SaveExploits5References4
BDU FSTEC
BDU FSTEC
added 2022/01/28 12:00 a.m.13 views

The vulnerability of Adobe Audition for Windows and macOS, related to reading data beyond the buffer in memory, allows attackers to escalate their privileges and gain unauthorized access to protected information.

The vulnerability of Adobe Audition for Windows and macOS relates to reading data beyond the buffer limit in memory. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and gain unauthorized access to protected information through a specially created MP4 file...

4.3CVSS6AI score0.01802EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/01/13 6:15 p.m.22 views

CVE-2021-40568

A buffer overflow vulnerability exists in Gpac through 1.0.1 via a malformed MP4 file in the svcparseslice function in avparsers.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

7.8CVSS7.9AI score
SaveExploits0References3
NVD
NVD
added 2022/01/13 6:15 p.m.23 views

CVE-2021-40568

A buffer overflow vulnerability exists in Gpac through 1.0.1 via a malformed MP4 file in the svcparseslice function in avparsers.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

7.8CVSS0.0131EPSS
SaveExploits1References3
OSV
OSV
added 2022/01/13 6:15 p.m.5 views

UBUNTU-CVE-2021-40568

A buffer overflow vulnerability exists in Gpac through 1.0.1 via a malformed MP4 file in the svcparseslice function in avparsers.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

7.8CVSS7.8AI score0.0131EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2022/01/13 6:15 p.m.33 views

CVE-2021-40568

A buffer overflow vulnerability exists in Gpac through 1.0.1 via a malformed MP4 file in the svcparseslice function in avparsers.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

7.8CVSS7.7AI score0.0131EPSS
SaveExploits1References1
Prion
Prion
added 2022/01/13 6:15 p.m.24 views

Buffer overflow

A buffer overflow vulnerability exists in Gpac through 1.0.1 via a malformed MP4 file in the svcparseslice function in avparsers.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

6.8CVSS8.1AI score0.0131EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2022/01/13 12:00 a.m.72 views

CVE-2021-40568

GPAC (mediaplayer framework) is affected by CVE-2021-40568 due to a buffer overflow in the svc_parse_slice function in av_parsers.c, exploitable via a malformed MP4 file. Affected versions include GPAC up to 1.0.1; impact includes denial of service, with potential code execution and privilege esc...

7.8CVSS7.9AI score0.0131EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2022/01/13 12:00 a.m.34 views

CVE-2021-40568

A buffer overflow vulnerability exists in Gpac through 1.0.1 via a malformed MP4 file in the svcparseslice function in avparsers.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

8.8AI score0.0131EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2022/01/13 12:00 a.m.31 views

CVE-2021-40568

A buffer overflow vulnerability exists in Gpac through 1.0.1 via a malformed MP4 file in the svcparseslice function in avparsers.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

7.8CVSS8.3AI score0.0131EPSS
SaveExploits1
OSV
OSV
added 2022/01/10 11:15 p.m.4 views

DEBIAN-CVE-2021-36412

A heap-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via the gprtpbuilderdompeg12video function, which allows attackers to possibly have unspecified other impact via a crafted file in the MP4Box command,...

7.8CVSS8.3AI score0.00851EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/01/10 12:00 a.m.10 views

GPAC 缓冲区错误漏洞

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC 1.0.1, which stems from a heap-based buffer overflow vulnerability in MP4Box of GPAC 1.0.1, which can be exploited by an attacker to produce unspecified other impacts through files made in MP4Box commands by usin...

7.8CVSS6.1AI score0.00851EPSS
SaveExploits1References4
Zero Day Initiative
Zero Day Initiative
added 2021/12/21 12:00 a.m.40 views

Adobe Premiere Rush MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Premiere Rush. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS4.1AI score0.01718EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/12/21 12:00 a.m.36 views

Adobe Premiere Rush MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Premiere Rush. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS4.1AI score0.01309EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/12/21 12:00 a.m.31 views

Adobe After Effects MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe After Effects. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2.7AI score0.00303EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/12/21 12:00 a.m.38 views

Adobe Premiere Pro MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Premiere Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2.8AI score0.00258EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/12/21 12:00 a.m.20 views

Adobe Audition MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Audition. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

3.3CVSS2.9AI score0.01802EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/12/21 12:00 a.m.23 views

Adobe Audition MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Audition. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

3.3CVSS2.9AI score0.01802EPSS
SaveExploits0References1
Rows per page
Query Builder