Heap overflow

Heap-based buffer overflow in the OggDecodePacket function in the OGG demuxer modules/demux/ogg.c in VideoLAN VLC media player before 2.0.2 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted OGG file...

CVE-2012-3377

Heap-based buffer overflow in the OggDecodePacket function in the OGG demuxer modules/demux/ogg.c in VideoLAN VLC media player before 2.0.2 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted OGG file...

CVE-2012-3377

VLC media player < 2.0.2 is vulnerable to a heap-based buffer overflow in the OGG demuxer. The flaw occurs in the Ogg_DecodePacket function (modules/demux/ogg.c) and can allow a remote attacker to cause a crash (DoS) and potentially execute arbitrary code via a crafted OGG file. Affected produ...

CVE-2012-3377

Heap-based buffer overflow in the OggDecodePacket function in the OGG demuxer modules/demux/ogg.c in VideoLAN VLC media player before 2.0.2 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted OGG file...

VLC Media Player 'OGG'文件远程堆缓冲区溢出漏洞

BUGTRAQ ID: 54345 CVE ID: CVE-2012-3377 VLC Media Player是多媒体播放器（最初命名为VideoLAN客户端）是VideoLAN计划的多媒体播放器。 VLC Media Player 2.0.2在处理OGG容器文件时，"OggDecodePacket"函数modules/demux/ogg.c存在边界错误，通过特制的OGG文件可造成堆缓冲区溢出，执行任意代码。 0 VideoLAN VLC Media Player 2.x 厂商补丁： VideoLAN -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

TagLib: Multiple vulnerabilities

Background TagLib is a library for reading and editing audio meta data. Description Multiple vulnerabilities have been found in TagLib: The "analyzeCurrent" function in ape/apeproperties.cpp contains a division by zero error CVE-2012-1107. The "parse" function in inogg/xiphcomment.cpp contains an...

SuSE 10 Security Update : taglib (ZYPP Patch Number 8041)

The following issue has been fixed : - Specially crafted ogg files could have crashed taglib %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid59524;...

update for chromium, v8 (important)

Chromium update to 21.0.1145 Fixed several issues around audio not playing with videos Crash Fixes Improvements to trackpad on Cr-48 Security Fixes bnc762481 - CVE-2011-3083: Browser crash with video + FTP - CVE-2011-3084: Load links from internal pages in their own process. - CVE-2011-3085: UI...

CVE-2011-3095

The OGG container in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write...

CVE-2011-3095

The OGG container in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write...

Out-of-bounds

The OGG container in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write...

CVE-2011-3095

The CVE-2011-3095 issue affects Chromium/Chrome’s OGG container handling. The initial description states an out-of-bounds write in the OGG container could allow remote attackers to cause a denial of service or other impact. Connected advisories indicate this was fixed by Chromium updates (e.g., o...

CVE-2011-3095

The OGG container in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write...

CVE-2011-3095

Removed by vendor...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 112983 Low CVE-2011-3083: Browser crash with video + FTP. Credit to Aki Helin of OUSPG. 113496 Low CVE-2011-3084: Load links from internal pages in their own process. Credit to Brett Wilson of the Chromium development community. 118374 Medium CVE-2011-3085: UI...

Mozilla Multiple Products Ogg Vorbis Decoding Memory Corruption (CVE-2012-0444)

A remote code execution vulnerability has been reported in Mozilla Firefox, Thunderbird and Seamonkey...

Fedora Update for taglib FEDORA-2012-4268

Check for the Version of taglib OpenVAS Vulnerability Test Fedora Update for taglib FEDORA-2012-4268 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora 15 : taglib-1.7.1-1.fc15 (2012-4268)

New upstream release, largely to address security issues related to ogg xiphcomments and ape sampleRate=0. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as muc...

Mozilla Firefox Ogg Vorbis Decoding Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in the parsing of Ogg...

[SECURITY] Fedora 16 Update: taglib-1.7.1-1.fc16

TagLib is a library for reading and editing the meta-data of several popular audio formats. Currently it supports both ID3v1 and ID3v2 for MP3 files, Ogg Vorbis comments and ID3 tags and Vorbis comments in FLAC, MPC, Speex, WavPack, TrueAudio files, as well as APE Tags...