Apple iOS < 8.4.1 Multiple Vulnerabilities

Binary data appleios841check.nbin...

firefox: multiple issues

CVE-2015-4473 Memory safety bugs fixed in Firefox ESR 38.2 and Firefox 40: Gary Kwong, Christian Holler, and Byron Campen reported memory safety problems and crashes that affect Firefox ESR 38.1 and Firefox 39. - CVE-2015-4474 Memory safety bugs fixed in Firefox 40: Tyson Smith, Bobby Holley,...

USN-2702-1 firefox vulnerabilities

Gary Kwong, Christian Holler, Byron Campen, Tyson Smith, Bobby Holley, Chris Coulson, and Eric Rahm discovered multiple memory safety issues in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via...

Use-after-free in MediaStream playback — Mozilla

Security researcher SkyLined reported a use-after-free issue in how audio is handled through the Web Audio API during MediaStream playback through interactions with the Web Audio API. This results in a potentially exploitable crash...

CVE-2015-4477

Use-after-free vulnerability in the MediaStream playback feature in Mozilla Firefox before 40.0 allows remote attackers to execute arbitrary code via unspecified use of the Web Audio API...

PT-2015-1919

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.4.1 Apple OS X versions prior to 10.10.5 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted...

PT-2015-1920

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.4.1 Apple OS X versions prior to 10.10.5 Description The issue is caused by a buffer overflow in the CoreMedia Playback component. This can be exploited by a remote attacker using a specially crafted video file,...

Google Stagefright Media Playback Engine Remote Code Execution Vulnerability (CNVD-2015-05024)

Stagefright is a media playback service for Android, introduced since version 2.2 Froyo. A remote code execution vulnerability exists in the Google Stagefright Media Playback Engine, which can be exploited by an attacker to execute arbitrary code in the context of an affected device...

Google Stagefright Media Playback Engine Remote Code Execution Vulnerability (CNVD-2015-05026)

Stagefright is a media playback service for Android, introduced since version 2.2 Froyo. A remote code execution vulnerability exists in the Google Stagefright Media Playback Engine, which can be exploited by an attacker to execute arbitrary code in the context of an affected device...

Google Stagefright Media Playback Engine Remote Code Execution Vulnerability (CNVD-2015-05027)

Stagefright is a media playback service for Android, introduced since version 2.2 Froyo. A remote code execution vulnerability exists in the Google Stagefright Media Playback Engine, which can be exploited by an attacker to execute arbitrary code in the context of an affected device...

Google Stagefright Media Playback Engine Remote Code Execution Vulnerability (CNVD-2015-05029)

Stagefright is a media playback service for Android, introduced since version 2.2 Froyo. A remote code execution vulnerability exists in the Google Stagefright Media Playback Engine, which can be exploited by an attacker to execute arbitrary code in the context of an affected device...

Google Stagefright Media Playback Engine Remote Code Execution Vulnerability (CNVD-2015-05030)

Stagefright is a media playback service for Android, introduced since version 2.2 Froyo. A remote code execution vulnerability exists in the Google Stagefright Media Playback Engine, which can be exploited by an attacker to execute arbitrary code in the context of an affected device...

Google Stagefright Media Playback Engine Remote Code Execution Vulnerability (CNVD-2015-05025)

Stagefright is a media playback service for Android, introduced since version 2.2 Froyo. A remote code execution vulnerability exists in the Google Stagefright Media Playback Engine, which can be exploited by an attacker to execute arbitrary code in the context of an affected device...

Android Stagefright Flaws Put 950 Million Devices at Risk

Vulnerabilities discovered in the Stagefright media playback engine that is native to Android devices could be the mobile world’s equivalent to Heartbleed. Almost all Android devices contain the security and implementation issues in question; unpatched devices are at risk to straightforward attac...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.

The vulnerability of Google Chrome’s browser in the “Stop playback of audio track” function content/renderer/media/webaudiocapturersource.cc is due to the use of memory after it has been freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Buffer overflow parsing H.264 video with Linux Gstreamer — Mozilla

Security researcher Aki Helin used the Address Sanitizer tool to find a buffer overflow during video playback on Linux systems. This was due to a problem in older versions of the Gstreamer plugin during the parsing of H.264 formatted video. This issue could be used to induce a possibly exploitabl...

Updated gstreamer0.10-plugins-bad packages fix security vulnerabilities

Updated gstreamer0.10-plugins-bad packages fix security vulnerability: Aki Helin discovered a buffer overflow in the GStreamer plugin for MP4 playback, which could lead in the execution of arbitrary code CVE-2015-0797...

MGASA-2015-0188 Updated gstreamer0.10-plugins-bad packages fix security vulnerabilities

Updated gstreamer0.10-plugins-bad packages fix security vulnerability: Aki Helin discovered a buffer overflow in the GStreamer plugin for MP4 playback, which could lead in the execution of arbitrary code CVE-2015-0797...

gst-plugins buffer overflow

Buffer overflow on MP4 playback...

Debian Security Advisory DSA 3225-1 (gst-plugins-bad0.10 - security update)

Aki Helin discovered a buffer overflow in the GStreamer plugin for MP4 playback, which could lead to the execution of arbitrary code. OpenVAS Vulnerability Test $Id: deb3225.nasl 8008 2017-12-06 10:53:07Z teissa $ Auto-generated from advisory DSA 3225-1 using nvtgen 1.0 Script version: 1.0 Author...