UBUNTU-CVE-2019-13238

An issue was discovered in Bento4 1.5.1.0. A memory allocation failure is unhandled in Core/Ap4SdpAtom.cpp and leads to crashes. When parsing input video, the program allocates a new buffer to parse an atom in the stream. The unhandled memory allocation failure causes a direct copy to a NULL...

CVE-2019-13238

CVE-2019-13238 affects Bento4 1.5.1.0. The issue is an unhandled memory allocation failure in Core/Ap4SdpAtom.cpp that causes a direct copy to a NULL pointer while parsing an atom in the stream, leading to crashes. Related entries describe the vulnerability as an incomplete fix (Incomplete Fix CV...

CVE-2019-13238

An issue was discovered in Bento4 1.5.1.0. A memory allocation failure is unhandled in Core/Ap4SdpAtom.cpp and leads to crashes. When parsing input video, the program allocates a new buffer to parse an atom in the stream. The unhandled memory allocation failure causes a direct copy to a NULL...

Memory corruption vulnerability exists in Baidu Video (CNVD-2017-35530)

Baidu Video is a new experience player newly launched by Baidu. It supports video and audio files in mainstream media formats and realizes local playback and online on-demand playback. A memory corruption vulnerability exists in Baidu Video Player when parsing special mkv format videos, which can...

Gentoo Security Advisory GLSA 201512-07

Gentoo Linux Local Security Checks GLSA 201512-07 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Mozilla: Underflow through code inspection (MFSA 2015-145)

Integer underflow in the RTPReceiverVideo::ParseRtpPacket function in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 might allow remote attackers to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a crafted WebRTC RTP...

Buffer overflow in libvpx while parsing vp9 format video — Mozilla

Security researcher Khalil Zhani reported that a maliciously crafted vp9 format video could be used to trigger a buffer overflow while parsing the file. This leads to a potentially exploitable crash due to a flaw in the libvpx library...

firefox: multiple issues

CVE-2015-4473 Memory safety bugs fixed in Firefox ESR 38.2 and Firefox 40: Gary Kwong, Christian Holler, and Byron Campen reported memory safety problems and crashes that affect Firefox ESR 38.1 and Firefox 39. - CVE-2015-4474 Memory safety bugs fixed in Firefox 40: Tyson Smith, Bobby Holley,...

Adobe Flash Heap Buffer Overflow Vulnerability

Adobe Flash Player is an integrated multimedia player. A security vulnerability exists in Adobe Flash Player's parsing of FLV files, which can be exploited by an attacker to cause a buffer overflow leading to arbitrary code execution...

Apple Mac OS X multiple security vulnerabilities

Information leakage, memory corruption on graphics and video formats parsing, privilege escalation, different libraries vulnerabilities...

Google Serves Up a Half Slice of Pwnium Cash for Pinkie Pie

Depending upon your perspective, the third iteration of Google Pwnium at this year’s CanSecWest conference was either a mild failure or a huge success. No researchers were able to come up with a full compromise of the Chrome OS, the target in this year’s contest, but Google said this week that it...

Mandriva Update for libgdata MDVA-2010:171 (libgdata)

Check for the Version of libgdata OpenVAS Vulnerability Test Mandriva Update for libgdata MDVA-2010:171 libgdata Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for libgdata MDVA-2010:171 (libgdata)

Check for the Version of libgdata OpenVAS Vulnerability Test Mandriva Update for libgdata MDVA-2010:171 libgdata Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

[MSA01110707] Flash Player/Plugin Video file parsing Remote Code Execution

MSA01110707: Flash Player/Plugin Video file parsing Remote Code Execution Date: July 13, 2007 Tested OS: Windows xp sp2 Italian, Windows xp sp2 English Linux Ubuntu 6.10 Tested Flash Versions: Flash Plugin 9.0.28.0 Windows Flash Player 9.0.28.0 Windows Flash Plugin 9.0.31.0 Linux Flash Player...