Flash Player Adobe Integrated Runtime Code Execution

The vulnerabilities of the Flash Player and Adobe Integrated Runtime programs are caused by buffer overflows. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or trigger service failures such as dereferencing uninitialized pointers or memory corruption using...

Adobe Integrated Runtime Flash Player Code Execution

The vulnerability of Adobe Integrated Runtime and Flash Player programs relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted MPEG-4 data...

Flash Player Code Execution

The vulnerability of the Flash Player software arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure such as reading beyond the memory limit or memory corruption using specially crafted MPEG-4 data...

Flash Player Code Execution

The vulnerability of the Flash Player software arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure such as reading beyond the memory limit or memory corruption using specially crafted MPEG-4 data...

Adobe Integrated Runtime Flash Player Code Execution

The vulnerability of Adobe Integrated Runtime and Flash Player programs relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted MPEG-4 data...

CVE-2015-8253

The Frontel protocol before 3 on RSI Video Technologies Videofied devices sets up AES encryption but sends all traffic in cleartext, which allows remote attackers to obtain sensitive 1 message or 2 MJPEG video data by sniffing the network...

CVE-2015-8253

The Frontel protocol before 3 on RSI Video Technologies Videofied devices sets up AES encryption but sends all traffic in cleartext, which allows remote attackers to obtain sensitive 1 message or 2 MJPEG video data by sniffing the network...

PT-2015-7756

Name of the Vulnerable Software and Affected Versions RSI Video Technologies Videofied devices using the Frontel protocol version prior to 3 Description The issue allows remote attackers to obtain sensitive message or MJPEG video data by sniffing the network, as the Frontel protocol sets up AES...

FFmpeg DoS

The vulnerability of the ffhevcparsesps function in the libavcodec/hevcps.c multimedia library of FFmpeg exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by using specially crafted HEVC data...

PT-2016-1406 · Adobe +1 · Integrated Runtime +2

Name of the Vulnerable Software and Affected Versions: Adobe Integrated Runtime and Flash Player affected versions not specified Description: The issue is related to the use of memory after it has been freed, which can be exploited by a remote attacker using specially crafted MPEG-4 data to execu...

PT-2016-1407 · Adobe +1 · Integrated Runtime +1

Name of the Vulnerable Software and Affected Versions: Adobe Integrated Runtime affected versions not specified Description: The issue is caused by a buffer overflow. It may allow a remote attacker to execute arbitrary code or cause a denial of service out-of-bounds memory read, memory corruption...

PT-2016-1405 · Adobe +1 · Integrated Runtime +2

Name of the Vulnerable Software and Affected Versions: Adobe Integrated Runtime and Flash Player affected versions not specified Description: The issue is related to the use of memory after it has been freed, which can be exploited by a remote attacker using specially crafted MPEG-4 data to execu...

UBUNTU-CVE-2015-8364

Integer overflow in the ffiviinitplanes function in libavcodec/ivi.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 allows remote attackers to cause a denial of service out-of-bounds heap-memory access or possibly have unspecified other impact via crafted image dimensions in...

Mageia: Security Advisory (MGASA-2015-0249)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Android Code Execution

The multiple vulnerabilities in the libstagefright library of the Android operating system are caused by buffer overflows. Exploitation of these vulnerabilities could allow a malicious actor to execute arbitrary code using specially crafted MP4 data...

Android OS Code Execution

The vulnerability of the MPEG4Extractor::parseChunk function in the libstagefright library of the Android operating system is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using specially crafted MPEG-4...

Android Code Execution

The vulnerability of the SampleTable::setSampleToChunkParams function in the libstagefright library of the Android operating system is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using specially crafted MP4 data...

Android Code Execution

The vulnerability of the MPEG4Extractor::parseChunk function in the libstagefright library of the Android operating system is due to a loss of integer precision. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially crafted MPEG-4 format data...

FFmpeg ff_mpv_common_init Denial of Service Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'ffmpvcommoninit' function in the libavcodec/mpegvideo.c file in versions of FFmpeg prior to 2.7.2, which arises from a failure of the program to...

CVE-2015-6824

The swsinitcontext function in libswscale/utils.c in FFmpeg before 2.7.2 does not initialize certain pixbuf data structures, which allows remote attackers to cause a denial of service segmentation violation or possibly have unspecified other impact via crafted video data...