VLC Media Player USF and Text Subtitles Decoders BOF Vulnerabilities - Windows

VLC Media Player is prone to buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VLC Media Player USF and Text Subtitles Decoders BOF Vulnerabilities - Linux

VLC Media Player is prone to buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VLC Media Player Memory Corruption

VLC media player is prone to a heap-based memory-corruption vulnerability. Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions. An attacker can exploit this issue by enticing an unsuspecting user to...

GLSA-201101-03 : libvpx: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201101-03 libvpx: User-assisted execution of arbitrary code libvpx is vulnerable to an integer overflow vulnerability when processing crafted VP8 video streams. Impact : A remote attacker could entice a user to open a specially...

Real Networks RealPlayer SP 'RecordClip' Method Remote Code Execution

Exploit for windows platform in category remote exploits Written by Sean de Regge seanderegge hotmail.com Exploit for the parameter injection bug in Realplayers RecordClip activeX function and firefox plugin http://www.zerodayinitiative.com/advisories/ZDI-10-211/ C:\Program...

Vulnerability in Windows Media File Format Could Allow Remote Code Execution

This host is missing a critical security update according to Microsoft Bulletin MS07-068. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

RealNetworks RealPlayer Code Execution

Written by Sean de Regge seanderegge hotmail.com Exploit for the parameter injection bug in Realplayers RecordClip activeX function and firefox plugin http://www.zerodayinitiative.com/advisories/ZDI-10-211/ C:\Program Files\Real\RealPlayer\RecordingManager.exe has 2 interesting switches: /t will...

CVE-2010-3907

Multiple integer overflows in real.c in the Real demuxer plugin in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a zero isubpackets value in a Real Media file, leading to a heap-based buffer...

Integer overflow

Multiple integer overflows in real.c in the Real demuxer plugin in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a zero isubpackets value in a Real Media file, leading to a heap-based buffer...

CVE-2010-3907

Multiple integer overflows in real.c in the Real demuxer plugin in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a zero isubpackets value in a Real Media file, leading to a heap-based buffer...

CVE-2010-3907

Multiple integer overflows in real.c in the Real demuxer plugin in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a zero isubpackets value in a Real Media file, leading to a heap-based buffer...

RealNetworks RealPlayer Cook Audio Codec Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious media file. The specific flaw exists in the...

Apple Quicktime rec Chunk Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the code...

Memory corruption

dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Director .dir media file with an invalid element size, a different vulnerability than CVE-2010-2581, CVE-2010-2880, CVE-2010-4084,...

CVE-2010-4086

CVE-2010-4086 affects Adobe Shockwave Player prior to 11.5.9.615. The vulnerability resides in the dirapi.dll component and is triggered by a crafted Director (.dir) media file with an invalid element size, leading to arbitrary code execution or memory corruption (also described as potential DoS)...

CVE-2010-3750

rjrmrpln.dll in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 does not properly validate file contents that are used during interaction with a heap buffer, which allows remote attackers to execute arbitrary code via crafted Name Value...

RealNetworks RealPlayer RJMDSections Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required in that a target must open a malicious website or media file. The specific flaw exists within the code responsible for parsing Name Value...

Microsoft plugs Eleven Vulnerabilities with Patch Tuesday Update

Microsoft issued nine security bulletins on Tuesday, fixing eleven vulnerabilities in products ranging from Windows, to Microsoft Office, to Internet Information Services. The patch release, part of the company’s monthly Patch Tuesday release included a fix for a previously undisclosed...

Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-2869

I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Memory corruption when Adobe Shockwave Player parses .dir media file CVE-2010-2869...

Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-2881

I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Memory corruption when Adobe Shockwave Player parses .dir media file CVE-2010-2881...