DirectShow msvidctl.dll组件解析畸形MPEG2视频格式文件溢出漏洞

“MPEG-2标准”制定于1994年，设计目标是高级工业标准的图象质量以及更高的传输率。MPEG-2所能提供每秒钟3兆到10兆的传输率,其在NTSC制式下的分辨率可达720X486。由于出色的性能表现，MPEG-2被用作DVD的指定标准外，并适用于HDTV高清电视。此外，MPEG-2还广泛用于为广播、有线电视网、电缆网络以及卫星直播提供广播级的数字视频。 是DirectShow相关msvidctl.dll组件解析畸形MPEG2视频格式文件触发溢出，攻击者可以使用普通的javascript堆喷射方式远程执行任意代码。 Windows...

Microsoft DirectShow (msvidctl.dll) MPEG-2 Memory Corruption

This module exploits a memory corruption within the MSVidCtl component of Microsoft DirectShow BDATuner.MPEG2TuneRequest. By loading a specially crafted GIF file, an attacker can overrun a buffer and execute arbitrary code. ClassID is now configurable via an advanced option otherwise randomized -...

Apple QuickTime MPEG-2播放组件远程内存破坏漏洞

BUGTRAQ ID: 33393 CVECAN ID: CVE-2009-0008 Apple QuickTime是一款非常流行的多媒体播放器。 QuickTime MPEG-2 Playback Component允许QuickTime用户导入和播放特定格式的MPEG-2内容，可从Apple在线商店单独购买和下载。该组件存在输入验证错误，如果访问了特制的电影文件就会导致播放器意外终止或执行任意代码。 Apple QuickTime MPEG-2 Playback Component 7.60 厂商补丁： Apple -----...

Apple QuickTime Multiple Vulnerabilities (Jan 2009) - Windows

Apple QuickTime is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:quicktime";...

Apple QuickTime Multiple Vulnerabilities - Jan09 (Windows)

The host is installed with Apple QuickTime and is prone to Multiple Vulnerabilities. OpenVAS Vulnerability Test $Id: secpodapplequicktimemultvulnjan09win.nasl 6519 2017-07-04 14:08:14Z cfischer $ Apple QuickTime Multiple Vulnerabilities - Jan09 Windows Authors: Chandan S Copyright: Copyright c 20...

CVE-2009-0008

Unspecified vulnerability in Apple QuickTime MPEG-2 Playback Component before 7.60.92.0 on Windows allows remote attackers to cause a denial of service application crash or execute arbitrary code via a crafted MPEG-2 movie...

Code injection

Unspecified vulnerability in Apple QuickTime MPEG-2 Playback Component before 7.60.92.0 on Windows allows remote attackers to cause a denial of service application crash or execute arbitrary code via a crafted MPEG-2 movie...

CVE-2009-0008

Unspecified vulnerability in Apple QuickTime MPEG-2 Playback Component before 7.60.92.0 on Windows allows remote attackers to cause a denial of service application crash or execute arbitrary code via a crafted MPEG-2 movie...

CVE-2009-0008

The CVE-2009-0008 issue affects Apple QuickTime MPEG-2 Playback Component (Windows) prior to version 7.60.92.0. Documents describe a vulnerability where processing a crafted MPEG-2 movie can cause an application crash (DoS) or allow remote code execution. Exploitation described in sources indicat...

CVE-2009-0008: Improper Input Validation

Unspecified vulnerability in Apple QuickTime MPEG-2 Playback Component before 7.60.92.0 on Windows allows remote attackers to cause a denial of service application crash or execute arbitrary code via a crafted MPEG-2 movie...

QuickTime < 7.6 Multiple Vulnerabilities

Binary data 4817.prm...

Design/Logic Flaw

MPlayer, possibly 1.0rc1, allows remote attackers to cause a denial of service SIGSEGV and application crash via 1 a malformed MP3 file, as demonstrated by lol-mplayer.mp3; 2 a malformed Ogg Vorbis file, as demonstrated by lol-mplayer.ogg; 3 a malformed MPEG-1 file, as demonstrated by...

CVE-2007-6718

MPlayer, possibly 1.0rc1, allows remote attackers to cause a denial of service SIGSEGV and application crash via 1 a malformed MP3 file, as demonstrated by lol-mplayer.mp3; 2 a malformed Ogg Vorbis file, as demonstrated by lol-mplayer.ogg; 3 a malformed MPEG-1 file, as demonstrated by...