CVE-2014-1280

Video Driver in Apple iOS before 7.1 and Apple TV before 6.1 allows remote attackers to cause a denial of service NULL pointer dereference and device hang via a crafted video file with MPEG-4 encoding...

CVE-2014-1280

CVE-2014-1280 affects Apple iOS before 7.1 and Apple TV before 6.1. The issue is in the Video Driver when processing MPEG-4 encoded video files, caused by a NULL pointer dereference that can lead to a denial of service (device hang). The vulnerability is documented across multiple sources and tie...

PT-2014-4066

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1 Apple TV versions prior to 6.1 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and device hang, via a crafted video file with MPEG-4 encoding...

CVE-2014-1280: Undefined Security Weakness

Video Driver in Apple iOS before 7.1 and Apple TV before 6.1 allows remote attackers to cause a denial of service NULL pointer dereference and device hang via a crafted video file with MPEG-4 encoding...

TagScanner 5.1 - Stack Buffer Overflow (PoC)

Title: ====== TagScanner v5.1 - Stack Buffer Overflow Vulnerability Date: ===== 2013-01-22 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=831 VL-ID: ===== 831 Introduction: ============= TagScanner is a multifunction program for organizing and managing your music...

3ivx MPEG-4 MP4 File Handling Stack Overflow - Specific (CVE-2007-6401)

There exists a buffer overflow vulnerability in 3ivx MPEG-4. Specifically, the vulnerability is due to improper handling of MP4 files by the 3ivx MPEG-4 codec plugin. A remote attacker can exploit this vulnerability by enticing the target user to open crafted MP4 file, potentially causing arbitra...

VLC Media Player 'MP4_ReadBox_skcr()' Buffer Overflow Vulnerability - Linux

VLC Media Player is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : VLC -- Heap corruption in MP4 demultiplexer (6a4bfe75-692a-11e0-bce7-001eecdd401a)

VideoLAN project reports : When parsing some MP4 MPEG-4 Part 14 files, insufficient buffer size might lead to corruption of the heap. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database :...

VLC -- Heap corruption in MP4 demultiplexer

VideoLAN project reports: When parsing some MP4 MPEG-4 Part 14 files, insufficient buffer size might lead to corruption of the heap...

Microsoft Windows multiple security vulnerabilities

Privilege escalation and code execution in spooler services,memory corruption in MPEG-4 codec, memroy corruption in RPC, privilege escalation in LSA, privilege escalation in CSRSS subsystem, WordPad memory corruption...

Code injection

The MPEG-4 codec in the Windows Media codecs in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 does not properly handle crafted media content with MPEG-4 video encoding, which allows remote attackers to execute arbitrary code via a file in an...

CVE-2010-0818

The MPEG-4 codec in the Windows Media codecs in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 does not properly handle crafted media content with MPEG-4 video encoding, which allows remote attackers to execute arbitrary code via a file in an...

CVE-2010-0818

The CVE-2010-0818 issue affects the MPEG-4 codec in Windows Media codecs on Windows XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, and Server 2008 Gold/SP2. Root cause: a buffer/handling flaw in the MPEG-4 codec when processing specially crafted media content with MPEG-4 video encoding, allowing rem...

MPEG-4 Codec Remote Code Execution Vulnerability (975558)

This host is missing a critical security update according to Microsoft Bulletin MS10-062. OpenVAS Vulnerability Test $Id: secpodms10-062.nasl 7174 2017-09-18 11:48:08Z asteins $ MPEG-4 Codec Remote Code Execution Vulnerability 975558 Authors: Veerendra G.G Copyright c 2010 SecPod,...

MPEG-4 Codec RCE Vulnerability (975558)

This host is missing a critical security update according to Microsoft Bulletin MS10-062. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Security Bulletin MS10-062 - Critical Vulnerability in MPEG-4 Codec Could Allow Remote Code Execution (975558)

Microsoft Security Bulletin MS10-062 - Critical Vulnerability in MPEG-4 Codec Could Allow Remote Code Execution 975558 Published: September 14, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in MPEG-4 codec. The vulnerabili...

CVE-2010-0818: Improper Control of Generation of Code

The MPEG-4 codec in the Windows Media codecs in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 does not properly handle crafted media content with MPEG-4 video encoding, which allows remote attackers to execute arbitrary code via a file in an...

Microsoft plugs Eleven Vulnerabilities with Patch Tuesday Update

Microsoft issued nine security bulletins on Tuesday, fixing eleven vulnerabilities in products ranging from Windows, to Microsoft Office, to Internet Information Services. The patch release, part of the company’s monthly Patch Tuesday release included a fix for a previously undisclosed...

Microsoft MPEG-4 Codec Media File Remote Code Execution Vulnerability

Description Microsoft MPEG-4 codec is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file or view a web page containing a malicious file. A successful exploit will result in the execution of arbitrary...

Microsoft Windows Media Player MPEG-4 Codec Code Execution (MS10-062; CVE-2010-0818)

MPEG-4 is an International Standards Organization ISO specification that covers many aspects of multimedia presentation including compression, authoring and delivery. A remote code execution vulnerability has been reported in the way the MPEG-4 codec handles supported format files. The...