GLSA-201707-10 : VLC: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201707-10 VLC: Multiple vulnerabilities Multiple vulnerabilities have been discovered in VLC. Please review the CVE identifiers referenced below for details. Impact : A remote attacker, by enticing a user to open a specially craft...

VLC: Multiple vulnerabilities

Background VLC is a cross-platform media player and streaming server. Description Multiple vulnerabilities have been discovered in VLC. Please review the CVE identifiers referenced below for details. Impact A remote attacker, by enticing a user to open a specially crafted subtitles file, could...

Cisco WebEx Network Recording Player ARF File RCE (cisco-sa-20170621-wnrp)

The version of Cisco WebEx Network Recording Player installed on the remote host is affected by a remote code execution vulnerability due to multiple buffer overflow conditions in the Advanced Recording Format ARF file player. An unauthenticated, remote attacker can exploit this, by convincing a...

The vulnerability of the MPEG-4 AVC software platform, Flash Player, allows attackers to execute arbitrary code.

The vulnerability of the MPEG-4 AVC software platform, Flash Player, arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...

The vulnerability of the Actionscript 2 class in the Flash Player software platform allows a perpetrator to execute arbitrary code.

The vulnerability of the Actionscript 2 class in the Flash Player software platform is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the component responsible for internal representation of raster data in the Adobe Flash Player allows a perpetrator to execute arbitrary code.

The vulnerability of the component responsible for internal representation of raster data in the Adobe Flash Player arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotel...

The vulnerability of the LocaleID class in the Flash Player software platform allows a perpetrator to execute arbitrary code.

The vulnerability of the LocaleID class in the Flash Player software platform arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...

The vulnerability of the PNG image analyzer in the Flash Player software platform allows a perpetrator to execute arbitrary code.

The vulnerability of the PNG image analyzer in the Flash Player software is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...

The vulnerability of the Shockwave Player software platform, which allows a violator to execute arbitrary code

The vulnerability of the Shockwave Player software arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code memory corruption...

The vulnerability of the Adobe Texture Format (ATF) module in the Flash Player software allows attackers to execute arbitrary code.

Vulnerability of the Adobe Texture Format ATF module in the Flash Player software platform. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the Flash Player software is related to the use of memory after it is freed, caused by multiple masking of screen objects. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Threat Actors Target Chinese Language News Sites

A California-based news website covering China, called China Digital Times, was targeted in a spying campaign that involved phishing lures and the use of the NetWire remote access Trojan. The attacks began in February 2017 and were part of a wider campaign of phishing, reconnaissance and malware...

VideoLAN VLC avcodec Denial of Service Vulnerability

VideoLAN VLC media player is a free, open source cross-platform multimedia player also a multimedia framework developed by the French organization VideoLAN. The product supports the playback of a variety of media files, CD-ROMs, etc., a variety of audio and video formats WMV, MP3, etc., etc...

Design/Logic Flaw

avcodec 2.2.x, as used in VideoLAN VLC media player 2.2.7-x before 2017-06-29, allows out-of-bounds heap memory write due to calling memcpy with a wrong size, leading to a denial of service application crash or possibly code execution...

CVE-2017-10699

avcodec 2.2.x, as used in VideoLAN VLC media player 2.2.7-x before 2017-06-29, allows out-of-bounds heap memory write due to calling memcpy with a wrong size, leading to a denial of service application crash or possibly code execution...

DEBIAN-CVE-2017-10699

avcodec 2.2.x, as used in VideoLAN VLC media player 2.2.7-x before 2017-06-29, allows out-of-bounds heap memory write due to calling memcpy with a wrong size, leading to a denial of service application crash or possibly code execution...

CVE-2017-10699

avcodec 2.2.x, as used in VideoLAN VLC media player 2.2.7-x before 2017-06-29, allows out-of-bounds heap memory write due to calling memcpy with a wrong size, leading to a denial of service application crash or possibly code execution...

CVE-2017-10699

CVE-2017-10699 affects VLC media player (v2.2.x) where avcodec 2.2.x can perform an out-of-bounds heap memory write by calling memcpy() with an incorrect size in VLC before 2.2.7, potentially crashing the application or enabling code execution. Public advisories and vendor patches indicate fixes ...

The vulnerability of the SDK functionality for metadata related to media playback profiles of the Flash Player allows attackers to execute arbitrary code.

The vulnerability of the SDK functionality for media playback profile metadata in the Flash Player lies in the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the metadata function of the Adobe Flash Player allows a hacker to execute arbitrary code.

The vulnerability of the metadata functionality of the Adobe Flash Player is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...