2499 matches found
MS12-004 midiOutPlayNextPolyEvent Heap Overflow
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "MS12-004...
MS12-004 midiOutPlayNextPolyEvent Heap Overflow
Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...
USN-1333-1: Libav vulnerabilities
Steve Manzuik discovered that Libav incorrectly handled certain malformed Matroska files. If a user were tricked into opening a crafted Matroska file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the...
Debian DSA-2378-1 : ffmpeg - several vulnerabilities
Several vulnerabilities have been discovered in FFmpeg, a multimedia player, server and encoder. Multiple input validations in the decoders for QDM2, VP5, VP6, VMD and SVQ1 files could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...
Microsoft Windows Media Could Allow Remote Code Execution Vulnerabilities (2636391)
This host is missing a critical security update according to Microsoft Bulletin MS12-004. OpenVAS Vulnerability Test $Id: secpodms12-004.nasl 5341 2017-02-18 16:59:12Z cfi $ Microsoft Windows Media Could Allow Remote Code Execution Vulnerabilities 2636391 Authors: Sooraj KS Copyright: Copyright c...
Microsoft Windows Media Could Allow Remote Code Execution Vulnerabilities (2636391)
This host is missing a critical security update according to Microsoft Bulletin MS12-004. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MS12-004 midiOutPlayNextPolyEvent Heap Overflow
This module exploits a heap overflow vulnerability in the Windows Multimedia Library winmm.dll. The vulnerability occurs when parsing specially crafted MIDI files. Remote code execution can be achieved by using the Windows Media Player ActiveX control. Exploitation is done by supplying a speciall...
[SECURITY] [DSA 2378-1] ffmpeg security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2378-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 03, 2012 http://www.debian.org/security/faq -...
USN-1320-1: FFmpeg vulnerabilities
Steve Manzuik discovered that FFmpeg incorrectly handled certain malformed Matroska files. If a user were tricked into opening a crafted Matroska file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking th...
[SECURITY] [DSA 2378-1] ffmpeg security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2378-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 03, 2012 http://www.debian.org/security/faq -...
DSA-2378-1 ffmpeg - several
Bulletin has no description...
Debian DSA-2336-1 : ffmpeg - several vulnerabilities
Multiple vulnerabilities were found in FFmpeg, a multimedia player, server and encoder : - CVE-2011-3362 An integer signedness error in decoderesidualblock function of the Chinese AVS video CAVS decoder in libavcodec can lead to denial of service memory corruption and application crash or possibl...
[SECURITY] [DSA 2336-1] ffmpeg security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2336-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez November 07, 2011 http://www.debian.org/security/faq -...
DSA-2336-1 ffmpeg - several
Bulletin has no description...
DreamBox DM800 1.5rc1 - File Disclosure
!/usr/bin/perl DreamBox DM800 :0:0:root:/home/root:/bin/sh daemon::1:1:daemon:/usr/sbin:/bin/sh bin::2:2:bin:/bin:/bin/sh sys::3:3:sys:/dev:/bin/sh sync::4:65534:sync:/bin:/bin/sync games::5:60:games:/usr/games:/bin/sh man::6:12:man:/var/cache/man:/bin/sh lp::7:7:lp:/var/spool/lpd:/bin/sh...
Apple QuickTime information disclosure vulnerability-vulnerability warning-the black bar safety net
Release date: 2011-10-28 Update date: 2011-10-28 Affected system: Apple QuickTime Player 7. x Not affected system: Apple QuickTime Player 7.7.1 Description: -------------------------------------------------------------------------------- BUGTRAQ ID: 5 0 1 3 0 CVE ID: CVE-2 0 1 1-3 2 2 0 QuickTime...
Apple QuickTime 7.7.1之前版本TKHD 元素处理远程代码执行漏洞
BUGTRAQ ID: 50403 CVE ID: CVE-2011-3251 QuickTime是由苹果电脑所开发的一种多媒体架构，能够处理许多的数字视频、媒体段落、音效、文字、动画、音乐格式，以及交互式全景影像的数项类型。 Apple QuickTime 7.7.1之前版本在处理特制视频文件时存在远程代码执行漏洞，攻击者可利用此漏洞以当前用户权限执行任意代码，导致应用意外终止。此漏洞不影响Mac OS X系统。 Apple QuickTime Player 7.x 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
[SECURITY] Fedora 16 Update: kdemultimedia-4.7.1-4.fc16
The kdemultimedia package contains multimedia applications, including: dragonplayer video player juk music player kmix audio mixer kscd audio cd player...
Adobe Flash Player流媒体逻辑错误远程代码执行漏洞
BUGTRAQ ID: 49717 CVE ID: CVE-2011-2430 Adobe Flash Player是一个集成的多媒体播放器。 Adobe Flash Player在实现上存在流媒体逻辑错误，远程攻击者可利用此漏洞执行任意代码 Adobe Flash Player 9.x Adobe Flash Player 10.x 厂商补丁： Adobe ----- Adobe已经为此发布了一个安全公告（APSB11-26）以及相应补丁: APSB11-26：Security update available for Adobe Flash Player...
Debian Security Advisory DSA 2306-1 (ffmpeg)
The remote host is missing an update to ffmpeg announced via advisory DSA 2306-1. OpenVAS Vulnerability Test $Id: deb23061.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2306-1 ffmpeg Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...