Lucene search
K

3024 matches found

Tenable Nessus
Tenable Nessus
added 2021/05/18 12:0 a.m.72 views

openSUSE Security Update : perl-Image-ExifTool (openSUSE-2021-707)

This update for perl-Image-ExifTool fixes the following issues : Update to version 12.25 fixes boo1185547 CVE-2021-22204 - JPEG XL support is now official - Added read support for Medical Research Council MRC image files - Added ability to write a number of 3gp tags in video files - Added a new...

7.8CVSS7.7AI score0.92782EPSS
Exploits38References2
Check Point Advisories
Check Point Advisories
added 2021/04/21 12:0 a.m.4 views

Apple Quicktime Remote Code Execution (CVE-2015-3788)

A remote code execution vulnerability exists in Apple Quicktime. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

6.8CVSS9.4AI score0.0324EPSS
Exploits0
Fedora
Fedora
added 2021/04/06 1:4 a.m.26 views

[SECURITY] Fedora 33 Update: mediainfo-21.03-1.fc33

MediaInfo CLI Command Line Interface. What information can I get from MediaInfo? General: title, author, director, album, track number, date, duration... Video: codec, aspect, fps, bitrate... Audio: codec, sample rate, channels, language, bitrate... Text: language of subtitle Chapters: number of...

7.5CVSS3.2AI score0.00663EPSS
Exploits1
Check Point Advisories
Check Point Advisories
added 2021/03/01 12:0 a.m.3 views

Apple Quicktime Remote Code Execution (CVE-2015-7089)

A remote code execution vulnerability exists in Apple Quicktime. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

6.8CVSS5.5AI score0.00571EPSS
Exploits0
Check Point Advisories
Check Point Advisories
added 2021/03/01 12:0 a.m.4 views

Apple Quicktime Remote Code Execution (CVE-2015-7088)

A remote code execution vulnerability exists in Apple Quicktime. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

6.8CVSS7.2AI score0.00571EPSS
Exploits0
VulnCheck KEV
VulnCheck KEV
added 2020/12/01 12:0 a.m.1 views

VulnCheck KEV: CVE-2003-0050

parsexml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via shell metacharacters...

7.5CVSS6.2AI score0.87851EPSS
Exploits3References1
Zero Day Initiative
Zero Day Initiative
added 2020/08/14 12:0 a.m.45 views

Microsoft Windows QuickTime Video Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

8.8CVSS7AI score0.15EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2020/07/09 12:0 a.m.30 views

VLC < 2.2.4 DoS

The version of VLC media player installed on the remote host with version prior to 2.2.4, is affected by a denial of service vulnerability. A buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN allows remote attackers to cause a denial of service crash or possibl...

9.8CVSS9.1AI score0.20819EPSS
Exploits1References2
Talos Blog
Talos Blog
added 2020/04/14 11:24 a.m.28 views

Vulnerability Spotlight: Information disclosure vulnerability in Microsoft Media Foundation

Marcin “Icewall” Noga of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. Microsoft Media Foundation contains an information disclosure vulnerability that could allow an attacker to eventually remotely execute code on the victim machine. Media Foundation is a COM-based multimedia...

2.5AI score
Exploits0
Talos
Talos
added 2020/04/14 12:0 a.m.56 views

Microsoft Media Foundation CQTMetadataKeysAtom GetKeyForIndex Information Disclosure Vulnerability

Summary An exploitable code execution vulnerability exists in the CQTMetadataKeysAtom GetKeyForIndex functionality of Microsoft Corporation Microsoft Media Foundation 10.0.18362.476. A specially crafted malformed file can cause code execution resulting in remote code execution. An attacker can...

5.5CVSS6AI score0.27512EPSS
Exploits0
Veracode
Veracode
added 2020/04/10 12:31 a.m.24 views

Arbitrary Code Execution

gstreamer-plugins-good is vulnerable to arbitrary code execution. The vulnerability exists through multiple heap buffer overflows and an array indexing error were found in the GStreamer's QuickTime media file format decoding plugin. An attacker could create a carefully-crafted QuickTime media .mo...

9.3CVSS3.4AI score0.13566EPSS
Exploits1References24Affected Software1
Veracode
Veracode
added 2020/04/10 12:31 a.m.22 views

Arbitrary Code Execution

gstreamer-plugins-good is vulnerable to arbitrary code execution. The vulnerability exists as multiple heap buffer overflows and an array indexing error were found in the GStreamer's QuickTime media file format decoding plugin. An attacker could create a carefully-crafted QuickTime media .mov fil...

9.3CVSS3.4AI score0.11725EPSS
Exploits1References20Affected Software1
Veracode
Veracode
added 2020/04/10 12:31 a.m.20 views

Arbitrary Code Execution

gstreamer-plugins-good is vulnerable to arbitrary code execution. The vulnerability exists as multiple heap buffer overflows and an array indexing error were found in the GStreamer's QuickTime media file format decoding plugin. An attacker could create a carefully-crafted QuickTime media .mov fil...

9.3CVSS3.4AI score0.17875EPSS
Exploits1References20Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:0 a.m.1 views

The vulnerability of the Media Foundation component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Media Foundation component in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created QuickTime file...

7.3CVSS0.33652EPSS
Exploits0References3
CNVD
CNVD
added 2019/11/14 12:0 a.m.1 views

Microsoft Windows Resource Management Error Vulnerability

Microsoft Windows is a set of operating systems used for personal devices.Microsoft Windows Server is a set of server operating systems. A remote code execution vulnerability exists in Microsoft Windows Media Foundation because the program fails to properly analyze specially crafted QuickTime med...

9.3CVSS7.8AI score0.33652EPSS
Exploits0References1
OSV
OSV
added 2019/11/12 7:15 p.m.4 views

CVE-2019-1430

A remote code execution vulnerability exists when Windows Media Foundation improperly parses specially crafted QuickTime media files.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'Microsoft Windows Media Foundation Remote Code...

7.8CVSS7.7AI score0.33652EPSS
Exploits0References1
Prion
Prion
added 2019/11/12 7:15 p.m.12 views

Remote code execution

A remote code execution vulnerability exists when Windows Media Foundation improperly parses specially crafted QuickTime media files.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'Microsoft Windows Media Foundation Remote Code...

9.3CVSS8.1AI score0.33652EPSS
Exploits0References1Affected Software2
Cvelist
Cvelist
added 2019/11/12 6:53 p.m.17 views

CVE-2019-1430

A remote code execution vulnerability exists when Windows Media Foundation improperly parses specially crafted QuickTime media files.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'Microsoft Windows Media Foundation Remote Code...

8.1AI score0.33652EPSS
Exploits0References1
CVE
CVE
added 2019/11/12 6:53 p.m.103 views

CVE-2019-1430

CVE-2019-1430 affects Windows Media Foundation. Root cause: improper parsing of specially crafted QuickTime files, enabling remote code execution with the caller’s privileges when a user opens the tainted file. Public exploits exist; attacker must lure the user to open the QuickTime content. Miti...

9.3CVSS8AI score0.33652EPSS
Exploits0References1Affected Software2
Talos Blog
Talos Blog
added 2019/11/12 11:7 a.m.80 views

Vulnerability Spotlight: Remote code execution vulnerability in Microsoft Media Foundation

Marcin Noga of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. Microsoft Media Foundation’s framework contains a remote code execution vulnerability that exists due to a use-after-free condition. This specific bug lies in Media Foundation's MPEG4 DLL. An attacker could provide a...

9.3CVSS2.7AI score0.33652EPSS
Exploits0
Rows per page
Query Builder