Unspecified vulnerability in Ffmpeg (CNVD-2017-20994)

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. There is an unspecified vulnerability in Ffmpeg, and no detailed vulnerability details are provided at this time...

DEBIAN-CVE-2017-11719

The dnxhddecodeheader function in libavcodec/dnxhddec.c in FFmpeg 3.0 through 3.3.2 allows remote attackers to cause a denial of service out-of-array access or possibly have unspecified other impact via a crafted DNxHD file...

The vulnerability of the WebKit component of the Safari browser, the iOS operating system, and the multimedia player iTunes allows a malicious actor to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the WebKit component in the Safari browser, the iOS operating system, and the multimedia player iTunes arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged conte...

The vulnerability of the WebKit component of the Safari browser, the iOS operating system, and the multimedia player iTunes allows a malicious actor to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the WebKit component in the Safari browser, the iOS operating system, and the multimedia player iTunes arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged conte...

The vulnerability of the Safari browser component, the iOS operating system, and the multimedia player iTunes allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the Safari browser component, the iOS operating system, and the multimedia player iTunes is due to an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context, or to cause ...

The vulnerability of the Safari browser component, the iOS operating system, and the multimedia player iTunes allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the Safari browser component, the iOS operating system, and the multimedia player iTunes is due to an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context, or to cause ...

The vulnerability of the Safari browser component, the iOS operating system, and the multimedia player iTunes allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the Safari browser component, the iOS operating system, and the multimedia player iTunes is due to an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context, or to cause ...

PT-2017-2532

Name of the Vulnerable Software and Affected Versions iTunes versions prior to 12.6.2 Description The issue involves the iTunes component and is related to insufficient access control in the multimedia player. It allows attackers to execute arbitrary code in a privileged context via a crafted app...

FBI Releases Article on Privacy Risks Associated with Internet-Connected Children's Toys

The Federal Bureau of Investigation FBI has released an article on the privacy risks associated with Internet-connected children's toys. FBI warns that Internet-connected toys may contain "sensors, microphones, cameras, data storage components, and other multimedia capabilities - including speech...

The vulnerability of the FFmpeg multimedia library, which allows a hacker to perform recording beyond the memory limit

The vulnerability of the FFmpeg multimedia library arises from buffer overflows in the stack. Exploiting this vulnerability allows a malicious actor to perform out-of-memory writes, related to the decodezbuf function in libavcodec/pngdec.c...

Freeware Advanced Audio Decoder mp4ff_read_stco Denial of Service Vulnerability

Freeware Advanced Audio Decoder is advanced audio encoder. Freeware Advanced Audio Decoder 2 FAAD2 version 2.7, a security vulnerability exists in the common/mp4ff/mp4atom.c/mp4ffreadstco function, which can be exploited by remote attackers to cause a denial of service vulnerability via a...

Red Spider Multimedia Network Classroom has Memory Corruption, Override Vulnerability

RedSpider Multimedia Network Classroom is a software product that realizes multimedia network teaching in electronic classroom, multimedia network classroom or computer classroom. Starscream Multimedia Network Classroom handles folder paths with override and memory corruption vulnerabilities, an...

The vulnerability of the Android operating system allows malicious actors to circumvent data privacy by bypassing the protection of the eMMC memory module when the device is powered on.

The vulnerability of the Android operating system relates to the protection against writing to the eMMC memory module. Exploiting this vulnerability allows a malicious actor to circumvent the protection against writing to the eMMC memory module when power is turned on...

Gstreamer 1.x Support on Receiver for Linux (Rfl)

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Receiver for Linux Rfl leveraged Gstreamer components to decode and play the data streams, which is ...

Subaru car software vulnerability analysis—never a failure of token-vulnerability warning-the black bar safety net

Not long ago, one from California car, information security researcher Aaron Guzman, in Australia, held a computer security conference to introduce a black into the Subaru car of the method. In his own 2017 Subaru WRX STI was found in a surprising number of software vulnerabilities, through these...

LG MRA58K - Out-of-Bounds Heap Read in CAVIFileParser::Destroy Resulting in Invalid Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1221 Similar to the previously reported issue 1206 , when parsing AVI files the CAVIFileParser object contains a fixed-size array of what appears to be pointer/length pairs, used I suppose to store the data for each stream. This is...

BMW 330i Denial of Service Vulnerability

The BMW 330i is an automobile from the German company BMW Bayerische Motoren Werke AG.Bluetooth stack is a Bluetooth transmission protocol applied to it. A security vulnerability exists in the Bluetooth stack in the BMW 330i version 2011. The vulnerability can be exploited by a remote attacker to...

Format string

The Bluetooth stack on the BMW 330i 2011 allows a remote crash of the CD/Multimedia software via %x or %c format string specifiers in a device name...

CVE-2017-9212

The Bluetooth stack on the BMW 330i 2011 allows a remote crash of the CD/Multimedia software via %x or %c format string specifiers in a device name...

PT-2017-18791

Name of the Vulnerable Software and Affected Versions BMW 330i 2011 Description The issue concerns the Bluetooth stack, which allows a remote crash of the CD/Multimedia software. This can be achieved by using %x or %c format string specifiers in a device name. Recommendations For the BMW 330i 201...