Lucene search
+L

1268 matches found

Cvelist
Cvelist
•added 2017/04/24 11:00 p.m.•51 views

CVE-2017-5037

An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer...

7.7AI score0.01032EPSS
SaveExploits0References6
Debian CVE
Debian CVE
•added 2017/04/24 11:00 p.m.•54 views

CVE-2017-5037

Removed by vendor...

8.2AI score
SaveExploits0
CVE
CVE
•added 2017/04/24 11:00 p.m.•130 views

CVE-2017-5037

CVE-2017-5037: In Chromium/Chromium-based browsers, multiple out-of-bounds writes were reported in the ChunkDemuxer component. A remote attacker could exploit crafted media content to trigger issues; affected versions include Chromium up to 57.0.2987.98.x. Upgrading to 57.0.2987.98 or newer mitig...

7.8CVSS7.6AI score0.01032EPSS
SaveExploits0References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/04/24 12:00 a.m.•6 views

CVE-2017-5037: Integer Overflow or Wraparound

An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer...

7.8CVSS6AI score0.01032EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2017/04/14 12:00 a.m.•33 views

SUSE SLED12 / SLES12 Security Update : gstreamer-plugins-good (SUSE-SU-2017:1010-1)

This update for gstreamer-plugins-good fixes the following issues : - A crafted aac audio file could have caused an invalid read and thus corruption or denial of service bsc1024014, CVE-2016-10198 - A crafted mp4 file could have caused an invalid read and thus corruption or denial of service...

7.5CVSS6.7AI score0.04768EPSS
SaveExploits0References16
osv_suse
osv_suse
•added 2017/04/13 9:59 a.m.•13 views

SUSE-SU-2017:1004-1 Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues: - A crafted aac audio file could have caused an invalid read and thus corruption or denial of service bsc1024014, CVE-2016-10198 - A crafted mp4 file could have caused an invalid read and thus corruption or denial of service...

7.5CVSS6.5AI score0.04768EPSS
SaveExploits0References7
Prion
Prion
•added 2017/03/21 6:59 a.m.•33 views

Heap overflow

The ffh2645extractrbsp function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service heap-based buffer over-read or obtain sensitive information from process memory via a crafted h264 video file...

5.8CVSS6.9AI score0.01008EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2017/03/21 6:59 a.m.•25 views

Design/Logic Flaw

The decoderesidual function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service buffer over-read or obtain sensitive information from process memory via a crafted h264 video file...

5.8CVSS7AI score0.01123EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
•added 2017/03/21 6:59 a.m.•29 views

CVE-2017-7208

The decoderesidual function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service buffer over-read or obtain sensitive information from process memory via a crafted h264 video file...

7.1CVSS7.1AI score0.01123EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2017/03/21 6:59 a.m.•16 views

UBUNTU-CVE-2017-7208

The decoderesidual function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service buffer over-read or obtain sensitive information from process memory via a crafted h264 video file...

7.1CVSS7.1AI score0.01123EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2017/03/21 6:59 a.m.•34 views

CVE-2017-7206

The ffh2645extractrbsp function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service heap-based buffer over-read or obtain sensitive information from process memory via a crafted h264 video file...

7.1CVSS7.2AI score0.01008EPSS
SaveExploits0References3
NVD
NVD
•added 2017/03/21 6:59 a.m.•31 views

CVE-2017-7206

The ffh2645extractrbsp function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service heap-based buffer over-read or obtain sensitive information from process memory via a crafted h264 video file...

7.1CVSS6.9AI score0.01008EPSS
SaveExploits0References2
NVD
NVD
•added 2017/03/21 6:59 a.m.•36 views

CVE-2017-7208

The decoderesidual function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service buffer over-read or obtain sensitive information from process memory via a crafted h264 video file...

7.1CVSS7.1AI score0.01123EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2017/03/21 6:59 a.m.•27 views

CVE-2017-7206

The ffh2645extractrbsp function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service heap-based buffer over-read or obtain sensitive information from process memory via a crafted h264 video file...

7.1CVSS7AI score
SaveExploits0References2
CVE
CVE
•added 2017/03/21 6:21 a.m.•103 views

CVE-2017-7208

CVE-2017-7208 affects the libav/libavcodec decoder. The vulnerability is in the decode_residual function of libavcodec in Libav 9.21, which could be exploited by a crafted H.264 video file to cause a denial-of-service via a buffer over-read and potentially leak memory. The Debian security advisor...

7.1CVSS7.6AI score0.01123EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
•added 2017/03/21 6:21 a.m.•30 views

CVE-2017-7206

The ffh2645extractrbsp function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service heap-based buffer over-read or obtain sensitive information from process memory via a crafted h264 video file...

7.1CVSS6.9AI score0.01008EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2017/03/10 9:19 a.m.•30 views

CVE-2017-5037

An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer...

8.8CVSS5.8AI score0.01032EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2017/03/10 12:00 a.m.•30 views

CVE-2017-5037

An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer...

7.8CVSS7.2AI score0.01032EPSS
SaveExploits0References3
Prion
Prion
•added 2017/02/17 7:59 a.m.•27 views

Design/Logic Flaw

FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file...

4.3CVSS5.6AI score0.01312EPSS
SaveExploits0References8Affected Software1
osv_cve
osv_cve
•added 2017/02/17 7:59 a.m.•26 views

CVE-2017-5024

FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file...

5.5CVSS6.4AI score0.01312EPSS
SaveExploits0References8
Rows per page
Query Builder