VLC Streamer Free - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application VLC Streamer Free published at the 'play' market has multiple vulnerabilities...

Debian DSA-3342-1 : vlc - security update

Loren Maggiore of Trail of Bits discovered that the 3GP parser of VLC, a multimedia player and streamer, could dereference an arbitrary pointer due to insufficient restrictions on a writable buffer. This could allow remote attackers to execute arbitrary code via crafted 3GP files. %NASLMINLEVEL...

Album Streamer 2.0 Directory Traversal

Document Title: =============== Album Streamer v2.0 iOS - Directory Traversal Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1481 Release Date: ============= 2015-05-07 Vulnerability Laboratory ID VL-ID: ===================================...

Album Streamer 2.0 iOS - Directory Traversal

Album Streamer 2.0 iOS - Directory Traversal Document Title: =============== Album Streamer v2.0 iOS - Directory Traversal Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1481 Release Date: ============= 2015-05-07 Vulnerability Laboratory ...

DSA-3150-1 vlc - security update

Bulletin has no description...

XtreamerPRO Media-player 2.6.0 & 2.7.0 - Multiple Vulnerabilities

No description provided by source. Exploit Title: XtreamerPRO Media-player and streamer multiple vulnerabilities Google Dork: intitle:Xtreamer Media Server + 2009 Xtreamer.net, All right reserved. Date: 15/05/2011 Author: Itzik Chen Software Link: www.xtreamer.net Version: ver 2.6.0, 2.7.0 Tested...

Web Video Streamer - Multiple Vulnerabilities

Web Video Streamer - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/65350/info Web Video Streamer is prone to following multiple security vulnerabilities: 1. Multiple cross-site scripting vulnerabilities 2. A directory-traversal vulnerability 3. A command-injection vulnerabili...

Web Video Streamer - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/65350/info Web Video Streamer is prone to following multiple security vulnerabilities: 1. Multiple cross-site scripting vulnerabilities 2. A directory-traversal vulnerability 3. A command-injection vulnerability A remote attacker can leverage these issues...

Buffer overflow

Buffer overflow in the ubnt-streamer RTSP service on the Ubiquiti UBNT AirCam with airVision firmware before 1.1.6 allows remote attackers to execute arbitrary code via a long rtsp: URI in a DESCRIBE request...

CVE-2013-1606

CVE-2013-1606: Buffer overflow in Ubiquiti airCam ubnt-streamer RTSP service prior to firmware 1.1.6 (AirCam/airVision) allows remote code execution via a crafted long RTSP DESCRIBE URI. Affected devices include AirCam models (v1.1.5 confirmed; pre-1.1.6). Root cause: parsing of RTSP URI overflow...

http-vlcstreamer-ls NSE Script

Connects to a VLC Streamer helper service and lists directory contents. The VLC Streamer helper service is used by the iOS VLC Streamer application to enable streaming of multimedia content from the remote server to the device. Script Arguments http-vlcstreamer-ls.dir directory to list default: /...

CVE-2011-1649

The Internet Streamer application in Cisco Content Delivery System CDS with software 2.5.7, 2.5.8, and 2.5.9 before build 126 allows remote attackers to cause a denial of service Web Engine crash via a crafted URL, aka Bug IDs CSCtg67333 and CSCth25341...

CVE-2011-1649

The Internet Streamer application in Cisco Content Delivery System CDS with software 2.5.7, 2.5.8, and 2.5.9 before build 126 allows remote attackers to cause a denial of service Web Engine crash via a crafted URL, aka Bug IDs CSCtg67333 and CSCth25341...

Cisco Releases Security Advisory for Cisco Internet Streamer

Cisco has released a security advisory to address a vulnerability in the web server component of the Cisco Internet Streamer application, which is part of the Cisco Content Delivery System. This vulnerability may allow an attacker to cause a denial-of-service condition. US-CERT encourages users a...

Cisco CDS Internet Streamer Web服务器远程拒绝服务漏洞

Bugtraq ID: 47979 CVE ID：CVE-2011-1649 Cisco Content Delivery System是一款思科公司开发的内容分发系统解决方案。 Cisco Internet Streamer应用程序是Cisco CDS中的一个组件，其WEB服务器存在一个安全漏洞，当解析特定URL时，WEB服务器引擎会崩溃。 未验证攻击者可以利用此漏洞对运行在服务引擎上的WEB服务器进行拒绝服务攻击，设备会继续工作，WEB引擎在攻击之后会重新启动。 Cisco Content Delivery System 2.5.9 Cisco Content Delivery...

Cisco Content Delivery System DoS

Internet Streamer URL processing crash...

Cisco Content Delivery System Internet Streamer: Web Server Vulnerability

...

XtreamerPRO Media-player 2.6.02.7.0 - Multiple Vulnerabilities

XtreamerPRO Media-player 2.6.02.7.0 - Multiple Vulnerabilities Exploit Title: XtreamerPRO Media-player and streamer multiple vulnerabilities Google Dork: intitle:Xtreamer Media Server + "2009 Xtreamer.net, All right reserved." Date: 15/05/2011 Author: Itzik Chen Software Link: www.xtreamer.net...

Debian DSA-2218-1 : vlc - heap-based buffer overflow

Aliz Hammond discovered that the MP4 decoder plugin of VLC, a multimedia player and streamer, is vulnerable to a heap-based buffer overflow. This has been introduced by a wrong data type being used for a size calculation. An attacker could use this flaw to trick a victim into opening a specially...

Debian DSA-2211-1 : vlc - missing input sanitising

Ricardo Narvaja discovered that missing input sanitising in VLC, a multimedia player and streamer, could lead to the execution of arbitrary code if a user is tricked into opening a malformed media file. This update also provides updated packages for oldstable lenny for vulnerabilities, which have...