Lucene search
+L

527 matches found

OSV
OSV
added 2019/09/19 9:15 p.m.4 views

CVE-2019-9719

A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srttoass in libavcodec/srtdec.c misuses snprintf. NOTE: Third parties dispute that this is a vulnerability because “no evidence of a...

8.8CVSS8.7AI score
SaveExploits0References4
Prion
Prion
added 2019/09/19 9:15 p.m.16 views

Format string

In Libav 12.3, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because srttoass in libavcodec/srtdec.c has a complex format argument to sscanf...

7.1CVSS6.2AI score0.01276EPSS
SaveExploits1References2Affected Software1
UbuntuCve
UbuntuCve
added 2019/09/19 9:15 p.m.49 views

CVE-2019-9717

In Libav 12.3, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because srttoass in libavcodec/srtdec.c has a complex format argument to sscanf...

7.1CVSS6.6AI score0.01276EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2019/09/19 9:15 p.m.45 views

CVE-2019-9719

A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srttoass in libavcodec/srtdec.c misuses snprintf. NOTE: Third parties dispute that this is a vulnerability because “no evidence of a...

8.8CVSS7.5AI score0.02025EPSS
SaveExploits1References5
Prion
Prion
added 2019/09/19 9:15 p.m.19 views

Stack overflow

DISPUTED A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srttoass in libavcodec/srtdec.c misuses snprintf. NOTE: Third parties dispute that this is a vulnerability because “no evidence o...

6.8CVSS8.7AI score0.02025EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2019/09/19 9:15 p.m.45 views

UBUNTU-CVE-2019-9717

In Libav 12.3, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because srttoass in libavcodec/srtdec.c has a complex format argument to sscanf...

6.5CVSS6.6AI score0.01276EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2019/09/19 9:15 p.m.45 views

CVE-2019-9720

A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srttoass in libavcodec/srtdec.c misuses snprintf...

7.1CVSS6.9AI score0.01092EPSS
SaveExploits1References3
Prion
Prion
added 2019/09/19 9:15 p.m.16 views

Stack overflow

A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srttoass in libavcodec/srtdec.c misuses snprintf...

7.1CVSS6.5AI score0.01092EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2019/09/19 9:15 p.m.7 views

UBUNTU-CVE-2019-9719

DISPUTED A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srttoass in libavcodec/srtdec.c misuses snprintf. NOTE: Third parties dispute that this is a vulnerability because “no evidence o...

8.8CVSS6.2AI score0.02025EPSS
SaveExploits1References6
OSV
OSV
added 2019/09/19 9:15 p.m.4 views

UBUNTU-CVE-2019-9720

A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srttoass in libavcodec/srtdec.c misuses snprintf...

6.5CVSS7AI score0.01092EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2019/09/19 8:37 p.m.23 views

CVE-2019-9720

A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srttoass in libavcodec/srtdec.c misuses snprintf...

6.6AI score0.01092EPSS
SaveExploits1References2
CVE
CVE
added 2019/09/19 8:37 p.m.138 views

CVE-2019-9720

CVE-2019-9720 affects Libav 12.3: a stack-based buffer overflow in the subtitle decoder due to incorrect use of snprintf in libavcodec/srtdec.c (srt_to_ass). Exploitation via a crafted Matroska video file can corrupt the stack. No explicit remediation details are given in the provided documents; ...

7.1CVSS6.5AI score0.01092EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2019/09/19 8:32 p.m.18 views

CVE-2019-9719

A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srttoass in libavcodec/srtdec.c misuses snprintf. NOTE: Third parties dispute that this is a vulnerability because “no evidence of a...

8.8AI score0.02025EPSS
SaveExploits1References4
CVE
CVE
added 2019/09/19 8:32 p.m.155 views

CVE-2019-9719

Libav 12.3 contains a stack-based buffer overflow in the subtitle decoder (srt_to_ass in libavcodec/srtdec.c) triggered by crafted Matroska video files; the issue stems from misusing snprintf. Multiple sources (Red Hat, SUSE, Ubuntu, OSV, and others) describe a vulnerability with claims of disput...

8.8CVSS8.7AI score0.02025EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2019/09/19 8:28 p.m.141 views

CVE-2019-9717

CVE-2019-9717 affects Libav 12.3, specifically the subtitle decoder in libavcodec/srtdec.c (function srt_to_ass). A crafted Matroska video file can cause a denial of service by hogging CPU, due to a complex format argument to sscanf in srt_to_ass. The available documents provide the vulnerability...

7.1CVSS6.2AI score0.01276EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2019/09/19 8:28 p.m.29 views

CVE-2019-9717

In Libav 12.3, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because srttoass in libavcodec/srtdec.c has a complex format argument to sscanf...

6.3AI score0.01276EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2019/09/19 12:0 a.m.8 views

PT-2019-19819 · FFmpeg · Libav

Name of the Vulnerable Software and Affected Versions: Libav version 12.3 Description: A stack-based buffer overflow issue exists in the subtitle decoder of Libav, potentially allowing attackers to corrupt the stack via a crafted video file in Matroska format. This issue arises from the misuse of...

8.8CVSS7.5AI score0.02025EPSS
SaveExploits1References9
Mageia
Mageia
added 2019/08/31 1:22 p.m.33 views

Updated vlc packages fixes security vulnerabilities

Updated vlc packages fixes security vulnerabilities: Multiple security issues were discovered in the VLC media player, which could result in the execution of arbitrary code or denial of service if a malformed file/stream is processed CVE-2019-13602, CVE-2019-13962, CVE-2019-14437, CVE-2019-14438,...

9.8CVSS4.2AI score0.036EPSS
SaveExploits1References4
OSV
OSV
added 2019/08/29 7:15 p.m.3 views

DEBIAN-CVE-2019-14776

A heap-based buffer over-read exists in DemuxInit in demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 via a crafted .mkv file...

7.8CVSS7.8AI score0.01484EPSS
SaveExploits0References1
OSV
OSV
added 2019/08/29 12:0 a.m.3 views

UBUNTU-CVE-2019-14777

The Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free...

7.8CVSS7.1AI score0.01455EPSS
SaveExploits0References4
Rows per page
Query Builder