WowzaMediaServer SecureToken bypass (and worse)

Product: Wowza Media Server URL: http://www.wowza.com/ Description: WMS is a quite popular RTMP/HLS/HDS/RTSP streaming server Issue: By default all installations of WMS use four modules in their application's config file: base, properties, logging, flvplayback. I've found out that the properties...

WowzaMediaServer StorageDir escape (regression)

Product: Wowza Media Server URL: http://www.wowza.com/ Description: WMS is a quite popular RTMP/HLS/HDS/RTSP streaming server Issue: In early 2009 I reported problem with processing of requests with relative paths. The issue surfaced again. In a nutshell, you can escape Applications StorageDir...

Vivotek IP Cameras - Multiple Vulnerabilities

Vivotek IP Cameras - Multiple Vulnerabilities Core Security - Corelabs Advisory http://corelabs.coresecurity.com Vivotek IP Cameras Multiple Vulnerabilities 1. Advisory Information Title: Vivotek IP Cameras Multiple Vulnerabilities Advisory ID: CORE-2013-0301 Advisory URL:...

WowzaMediaServer StorageDir Constraint Bypass

Product: Wowza Media Server URL: http://www.wowza.com/ Description: WMS is a quite popular RTMP/HLS/HDS/RTSP streaming server Issue: In early 2009 I reported problem with processing of requests with relative paths. The issue surfaced again. In a nutshell, you can escape Applications StorageDir...

[SECURITY] Fedora 19 Update: curl-7.29.0-5.fc19

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

Fedora Update for curl FEDORA-2013-2098

Check for the Version of curl OpenVAS Vulnerability Test Fedora Update for curl FEDORA-2013-2098 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

FreeBSD : vlc -- arbitrary code execution in Real RTSP and MMS support (62f36dfd-ff56-11e1-8821-001b2134ef46)

Jean-Baptiste Kempf, on behalf of the VideoLAN project reports : If successful, a malicious third party could crash the VLC media player process. Arbitrary code execution could be possible on some systems. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...

Slackware Advisory SSA:2004-124-03 xine-lib update

The remote host is missing an update as announced via advisory SSA:2004-124-03. OpenVAS Vulnerability Test $Id: esoftslkssa200412403.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware: Security Advisory (SSA:2004-124-03)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Scientific Linux Security Update : HelixPlayer on SL4.x i386/x86_64

Multiple buffer and integer overflow flaws were found in the way HelixPlayer processed Graphics Interchange Format GIF files. An attacker could create a specially crafted GIF file which would cause HelixPlayer to crash or, potentially, execute arbitrary code when opened. CVE-2009-4242,...

Fedora Update for curl FEDORA-2012-0894

Check for the Version of curl OpenVAS Vulnerability Test Fedora Update for curl FEDORA-2012-0894 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

VLC Media Player Multiple Vulnerabilities - Mar 12 (Linux)

This host is installed with VLC Media Player and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbvlcmediaplayermultvulnmar12lin.nasl 5956 2017-04-14 09:02:12Z teissa $ VLC Media Player Multiple Vulnerabilities - Mar 12 Linux Authors: Madhuri D Copyright: Copyright c 2012...

VLC Media Player Multiple Vulnerabilities - Mar 12 (Windows)

This host is installed with VLC Media Player and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbvlcmediaplayermultvulnmar12win.nasl 8174 2017-12-19 12:23:25Z cfischer $ VLC Media Player Multiple Vulnerabilities - Mar 12 Windows Authors: Madhuri D Copyright: Copyright c 20...

VLC Media Player Multiple Vulnerabilities (Mar 2012) - Linux

VLC Media Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-1776

Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Real RTSP stream...

CVE-2012-1776

Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Real RTSP stream...

DEBIAN-CVE-2012-1776

Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Real RTSP stream...

Heap overflow

Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Real RTSP stream...

CVE-2012-1776

Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Real RTSP stream...

CVE-2012-1776

VLC Media Player (before 2.0.1) suffers multiple heap-based buffer overflows when handling crafted Real RTSP streams, enabling remote crash or possibly arbitrary code execution (remote exploit). Mitigation from connected sources recommends upgrading to the latest VLC version (per GLSA 201411-01, ...