CVE-2018-14923

A vulnerability in uniview EZPlayer 1.0.6 could allow an attacker to execute arbitrary code on a targeted system via video playback...

Design/Logic Flaw

A vulnerability in uniview EZPlayer 1.0.6 could allow an attacker to execute arbitrary code on a targeted system via video playback...

CVE-2018-14923

The CVE-2018-14923 vulnerability affects the uniview EZPlayer 1.0.6, with the issue described as allowing an attacker to execute arbitrary code on a targeted system via video playback. The connected sources corroborate the existence of this vulnerability and its potential for high impact, but the...

CVE-2018-14923

A vulnerability in uniview EZPlayer 1.0.6 could allow an attacker to execute arbitrary code on a targeted system via video playback...

Denial of Service Vulnerability in EZPlayer Player

EZPlayer player is used to playback local video recordings. It supports .ts, .mp4 and SD card video format playback, video synchronization playback and other functions. A denial of service vulnerability exists in EZPlayer Player. An attacker can exploit the vulnerability to cause a denial of...

[SECURITY] Fedora 28 Update: znc-1.7.1-1.fc28

ZNC is an IRC bouncer with many advanced features like detaching, multiple users, per channel playback buffer, SSL, IPv6, transparent DCC bouncing, Perl and C++ module support to name a few...

The vulnerability of the Qualcomm Video Services component in the Android operating system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Qualcomm Video Services component in the Android operating system arises from an operation that occurs outside the buffer in memory when playing ASF files. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibilit...

[SECURITY] Fedora 28 Update: soundtouch-2.0.0-3.fc28

SoundTouch is a LGPL-licensed open-source audio processing library for changing the Tempo, Pitch and Playback Rates of audio streams or files. The SoundTouch library is suited for application developers writing sound processing tools that require tempo/pitch control functionality, or just for...

June 26, 2018—KB4284848 (OS Build 17134.137)

None None...

Security Bulletin: A vulnerability in the Firefox component of the Synthetic Playback agent affects IBM Performance Management products.

Summary Multiple browsers could allow a remote attacker to obtain sensitive information, caused by the failure to consider the role of the TCP congestion window in providing information about content length by the HTTPS protocol or by the HTTP/2 protocol. By visiting a Web site owned by a malicio...

Code Execution Vulnerability in Yuvision EZPlayer Video Player

ZPlayer Video Player is a video player software by Yuvision. Yuvision EZPlayer Video Player has a code execution vulnerability when playing video. An attacker can exploit the vulnerability to execute arbitrary code...

heinekingmedia StashCat for Android, Web and Desktop Man-in-the-Middle Attack Vulnerability

heinekingmedia StashCat for Android, Web and Desktop are all products of the German company heinekingmedia. heinekingmedia StashCat for Android is an Android-based enterprise communication software. heinekingmedia StashCat for Web is the web-based version and heinekingmedia StashCat for Desktop i...

DEBIAN-CVE-2017-2906

An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation suite version 2.78c. A specially created '.avi' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

DEBIAN-CVE-2017-2907

An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation suite version 2.78c. A specially created '.avi' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

UBUNTU-CVE-2017-2906

An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation suite version 2.78c. A specially created '.avi' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

Tencent Video suffers from memory out-of-bounds access vulnerability

Tencent Video is Tencent's video playback product, positioned as China's largest online video media platform, supporting online viewing, offline caching to watch videos and watch local videos. A memory out-of-bounds access vulnerability exists in Tencent Video when handling certain mp4 format...

Skyworth smart TVs have smart hardware vulnerabilities

Skyworth Group Limited is a publicly listed technology company specializing in the production of consumer electronics, networking and communication products. A smart hardware vulnerability exists in Skyworth Smart TV. The vulnerability is due to Skyworth Smart TV's failure to restrict permissions...

Vulnerability Spotlight: Multiple Simple DirectMedia Layer Vulnerabilities

Discovered by Lilith Wyatt of Cisco Talos Overview Talos is disclosing several vulnerabilities identified in Simple DirectMedia Layer's SDL2Image library that could allow code execution. Simple DirectMedia Layer is a cross-platform development library designed to provide low level access to audio...

GLSA-201803-04 : Newsbeuter: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201803-04 Newsbeuter: User-assisted execution of arbitrary code Newsbeuter does not properly escape shell meta-characters in an RSS item with a media enclosure in the podcast playback function of Podbeuter. Impact : A remote...

Zhejiang Dahua Playback Library SDK suffers from out-of-bounds access vulnerability (CNVD-2018-01917)

Playback Library SDK is a development kit based on Dahua's private code stream encapsulation protocol developed to serve network DVRs, network video servers, network cameras, network dome cameras, intelligent devices and other products. An out-of-bounds access vulnerability exists in dhplay.dll i...