[SECURITY] Fedora 27 Update: mpg123-1.25.6-1.fc27

Real time MPEG 1.0/2.0/2.5 audio player/decoder for layers 1, 2 and 3 most commonly MPEG 1.0 layer 3 aka MP3, as well as re-usable decoding and output libraries...

Adobe Flash - Out-of-Bounds Memory Read in MP4 Parsing Exploit

Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1321 The attached MP4 file causes an out-of-bounds memory access when played in flash player. 0day.today 2018-01-02...

Null Pointer Reference Vulnerability in PPLive

PPLive is an online video player developed and operated by Shanghai Poly Media Technology Co. A null pointer reference vulnerability exists when PPLive plays or opens a specific mkv file online, which can be exploited by an attacker to conduct a denial of service attack...

GLSA-201709-16 : Adobe Flash Player: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201709-16 Adobe Flash Player: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the referenced CVE identifiers for details. Impact : A remote attacker could possibly execut...

Null Pointer Reference Vulnerability in Thunderbolt Video

Xunlei Video is a media player under Xunlei, which was officially renamed Xunlei Look Player after the launch of version 3.0. A null pointer reference vulnerability exists in Xunlei Video when opening certain MP4 files. An attacker can exploit the vulnerability to cause a denial of service,...

Buffer Overflow Vulnerability in Youku PC Player

Youku PC Player is a video player for Youku.com. YoukuNplayer.exe is vulnerable to a buffer overflow vulnerability when parsing special vod files. An attacker exploiting this vulnerability could cause a denial of service or execute arbitrary code...

Adobe Flash Player: Multiple vulnerabilities

Background The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Description Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the referenced CVE identifiers for details. Impact A remote attacker coul...

Memory Corruption Vulnerability in Shooter Player dh264 Module

Shooter Video Player is an open source player project created and maintained by Shooter.com. Kernel based on MPC, MPC-HC and ffmpeg. A memory corruption vulnerability exists in the dh264 module of Shooter Video Player, which can be exploited by an attacker to cause a denial of service...

[SECURITY] Fedora 25 Update: mpg123-1.25.6-1.fc25

Real time MPEG 1.0/2.0/2.5 audio player/decoder for layers 1, 2 and 3 most commonly MPEG 1.0 layer 3 aka MP3, as well as re-usable decoding and output libraries...

TecnoVISION DLX Spot Player4 Elevation of Privilege Vulnerability

TecnoVISION DLX Spot Player4 is a control management software for LED video walls from TecnoVISION Australia. A security vulnerability exists in TecnoVISION DLX Spot Player4, which originates from the use of the hardcoded password 'tecn0visi0n' for the dlxuser account. The vulnerability can be...

Memory Corruption Vulnerability in Sohu Video Player mp4splitter Module

Sohu Video 5 is a video player from Sohu. Sohu Video Player suffers from a memory corruption vulnerability in the mp4splitter module when opening certain MP4 files, which can be exploited by an attacker to cause a denial of service...

[SECURITY] Fedora 26 Update: mpg123-1.25.6-1.fc26

Real time MPEG 1.0/2.0/2.5 audio player/decoder for layers 1, 2 and 3 most commonly MPEG 1.0 layer 3 aka MP3, as well as re-usable decoding and output libraries...

Memory Corruption Vulnerability in Youku PC Player

Youku PC Player is a video player for Youku.com. A memory corruption vulnerability exists in YoukuNplayer.exe when parsing special mp4 files, which can be exploited by attackers to cause a denial of service...

VLC Media Player iOS App 2.7.8 File Disclosure

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Local File Disclosure product: VLC media player iOS app vulnerable version: 2.7.8 fixed version: 2.8.1 CVE number: - impact: Medium homepage:...

VLC Media Player iOS App 2.7.8 File Disclosure Vulnerability

VLC Media Player iOS application version 2.7.8 suffers from a file disclosure vulnerability. title: Local File Disclosure product: VLC media player iOS app vulnerable version: 2.7.8 fixed version: 2.8.1 CVE number: - impact: Medium homepage:...

MGASA-2017-0339 Updated flash-player-plugin packages fix security vulnerability

Adobe Flash Player 27.0.0.130 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system. This update addresses two memory corruption vulnerabilities that could lead to code execution CVE-2017-11281...

Updated flash-player-plugin packages fix security vulnerability

Adobe Flash Player 27.0.0.130 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system. This update addresses two memory corruption vulnerabilities that could lead to code execution CVE-2017-11281...

userpanel.net XSS vulnerability

Vulnerable URL: https://www.userpanel.net/radio/player.php?bgcolor=xss"%20onload="prompt/openbugbounty/=CC0033=7=no=no=no=yes=7=9912=utf8 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 13.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

KB4038806: Security update for Adobe Flash Player (September 2017)

The remote Windows host is missing security update KB4038806. It is, therefore, affected by multiple remote code execution vulnerabilies in Adobe Flash Player. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid103220; scriptversion"1.10"; scriptcvsdate"Date: 2019/11/12"...

RHEL 6 : flash-plugin (RHSA-2017:2702)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2017:2702 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update upgrades Flash Player to...