archive.rhizome.org XSS vulnerability

Vulnerable URL: http://archive.rhizome.org/exhibition/locationiseverything/flashdetection.swf?flashContentURL=javascript:alert/OPENBUGBOUNTY/PENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

archive.boston.com XSS vulnerability

Vulnerable URL: http://archive.boston.com/news/special/nursing/flash/flashdetection.swf?flashContentURL=javascript:alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

mervers.eu XSS vulnerability

Open Bug Bounty ID: OBB-204017 Description| Value ---|--- Affected Website:| mervers.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

stuff.mit.edu XSS vulnerability

Vulnerable URL: https://stuff.mit.edu/afs/athena/project/apreso/SMA/MIT/5413/sma-5413-lec-NUS-ENG-22sep2005-0730files/flashdetection.swf?flashContentURL=javascript:alert'OPENBUGBOUNTY'=flasherror.htm=7=0=0=false Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS...

Design/Logic Flaw

The zlibrefill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers to cause an infinite loop denial of service via a crafted SWF file...

CVE-2016-6881

The zlibrefill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers to cause an infinite loop denial of service via a crafted SWF file...

Memory corruption

The rawdecode function in libavcodec/rawdec.c in FFmpeg before 3.1.2 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a crafted SWF file...

CVE-2016-6671

The rawdecode function in libavcodec/rawdec.c in FFmpeg before 3.1.2 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a crafted SWF file...

CVE-2016-6671

The rawdecode function in libavcodec/rawdec.c in FFmpeg before 3.1.2 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a crafted SWF file...

CVE-2016-6671

The rawdecode function in libavcodec/rawdec.c in FFmpeg before 3.1.2 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a crafted SWF file...

UBUNTU-CVE-2016-6881

The zlibrefill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers to cause an infinite loop denial of service via a crafted SWF file...

CVE-2016-6881

The zlibrefill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers to cause an infinite loop denial of service via a crafted SWF file...

DEBIAN-CVE-2016-6881

The zlibrefill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers to cause an infinite loop denial of service via a crafted SWF file...

CVE-2016-6881

This CVE refers to FFmpeg before 3.1.3, where the zlib_refill function in libavformat/swfdec.c can trigger an infinite loop DoS via a crafted SWF file. Affected software is FFmpeg; the root cause is an issue in zlib_refill handling within SWF decoding. Documented impact is denial of service with ...

CVE-2016-6881

The zlibrefill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers to cause an infinite loop denial of service via a crafted SWF file...

CVE-2016-6881

The zlibrefill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers to cause an infinite loop denial of service via a crafted SWF file...

CVE-2016-6671

The rawdecode function in libavcodec/rawdec.c in FFmpeg before 3.1.2 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a crafted SWF file...

CVE-2016-6881

The zlibrefill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers to cause an infinite loop denial of service via a crafted SWF file...

CVE-2016-6671

Illustrative vulnerability summary : CVE-2016-6671 affects FFmpeg’s libavcodec/rawdec.c, where the raw_decode function in FFmpeg before 3.1.2 can be exploited by a crafted SWF file to cause memory corruption, leading to denial of service or arbitrary code execution. Affected component: libavcodec...

CVE-2016-6881

The zlibrefill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers to cause an infinite loop denial of service via a crafted SWF file...