Nullsoft Winamp Pro Denial of Service Vulnerability

Nullsoft Winamp Pro is a set of free media player software developed by Nullsoft Corporation in the United States. The program supports a wide range of media formats, skinning and plug-in extensions, as well as the most basic playlist and media library features. A security vulnerability exists in...

Memory corruption vulnerability in Mango TV client (CNVD-2017-35526)

Mango TV is the only Internet video platform under Hunan Radio and Television, exclusively providing HD video live on-demand broadcasting of all Hunan TV programs, as well as supporting the playback of a variety of local videos. A memory corruption vulnerability exists in the MangoTV client when...

Memory Corruption Vulnerability in Storm Video 5 PC Client (CNVD-2017-35532)

Storm Video 5 is a video player from Beijing Storm Technology Co. A memory corruption vulnerability exists when opening certain MOV files in the Storm Video player, which can be exploited by an attacker to cause a denial of service...

Memory Corruption Vulnerability in Video Pioneer for PC

Video Pioneer is a software that can play video and audio online based on P2P Cloud 3D technology, supporting multiple streaming protocols, multiple audio and video formats. A memory corruption vulnerability exists in the Pioneer Player when parsing special mkv files, which can be exploited by...

Memory corruption vulnerability exists in Xunlei Video (CNVD-2017-34201)

Xunlei Video is a media player from Xunlei. A memory corruption vulnerability exists in the mp4splitter module of Xunlei Video when parsing certain MOV files, which can be exploited by an attacker to cause a denial of service attack or arbitrary code execution...

Xiph.Org Libvorbis Denial of Service Vulnerability

Xiph.Org libvorbis is an open source audio music encoding and decoding function library . A security vulnerability exists in the 'barknoisehybridmp' function in the psy.c file in Xiph.Org libvorbis version 1.3.5. A remote attacker can exploit this vulnerability to cause a denial of service...

Memory Override Access Vulnerability in Xunlei Look Client

Xunlei Look client is Xunlei's video playback software. A memory override access vulnerability exists in the Xunlei Look client's decoder when decoding special mp4 files. An attacker could exploit this vulnerability to cause a denial of service...

Memory Override Vulnerability in Sohu Video 5

Sohu Video 5 is Sohu's video playback software for PC. A memory override vulnerability exists in Sohu Video 5's decoder when decoding special mp4 files. An attacker exploited the vulnerability to cause the software to crash, resulting in a denial of service...

Denial of Service Vulnerability in Storm Video 5

Storm Video 5 is the video playback software of Beijing Storm Technology Co. Storm Video 5 decoder has a denial of service vulnerability when decoding special mp4 files, which can be exploited by attackers to cause the software to crash, resulting in a denial of service...

Google Chrome V8 JavaScript Engine Out-of-Bounds Write Vulnerability

Google Chrome is a fast, secure and free web browser that is well suited to meet the browser requirements of new types of websites. A security vulnerability exists in the V8 JavaScript Engine in Google Chrome. A remote attacker can exploit the vulnerability to cause out-of-bounds memory writes wi...

Google Chrome Buffer Overflow Vulnerability (CNVD-2017-06701)

Google Chrome is a fast, secure and free web browser that is well suited to meet the browser requirements of new types of websites. An integer overflow vulnerability exists in FFmpeg in Google Chrome. A remote attacker can exploit this vulnerability to cause out-of-bounds memory writes with the...

Google Chrome Buffer Overflow Vulnerability (CNVD-2017-06708)

Google Chrome is a fast, secure and free web browser that is well suited to meet the browser requirements of new types of websites. An integer overflow vulnerability exists in FFmpeg in Google Chrome. A remote attacker can exploit this vulnerability to cause out-of-bounds memory writes with the...

Google Chrome Buffer Overflow Vulnerability (CNVD-2017-06709)

Google Chrome is a fast, secure and free web browser that is well suited to meet the browser requirements of new types of websites. An integer overflow vulnerability exists in FFmpeg in Google Chrome. A remote attacker can exploit this vulnerability to cause out-of-bounds memory writes with the...

Google Chrome Buffer Overflow Vulnerability (CNVD-2017-06711)

Google Chrome is a fast, secure and free web browser that is well suited to meet the browser requirements of new types of websites. A buffer overflow vulnerability exists in FFmpeg in Google Chrome. A remote attacker can exploit this vulnerability to cause out-of-bounds memory writes with the hel...

CVE-2017-5408

Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such cross-origin use, leading to potential information disclosure for video captions. This vulnerability affects Firefox 52, Firefox ESR 45.8, Thunderbird 52, and Thunderbird 45.8...

CVE-2017-5408

Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such cross-origin use, leading to potential information disclosure for video captions. This vulnerability affects Firefox 52, Firefox ESR 45.8, Thunderbird 52, and Thunderbird 45.8...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.

The vulnerability of the FFmpeg component in Google Chrome browsers arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause service interruptions through the use of a specially created video file...

Debian Security Advisory DSA 3776-1 (chromium-browser - security update)

Several vulnerabilities have been discovered in the chromium web browser. CVE-2017-5006 Mariusz Mlynski discovered a cross-site scripting issue. CVE-2017-5007 Mariusz Mlynski discovered another cross-site scripting issue. CVE-2017-5008 Mariusz Mlynski discovered a third cross-site scripting issue...

Debian DSA-3776-1 : chromium-browser - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2017-5006 Mariusz Mlynski discovered a cross-site scripting issue. - CVE-2017-5007 Mariusz Mlynski discovered another cross-site scripting issue. - CVE-2017-5008 Mariusz Mlynski discovered a third cross-site scripting...

chromium-browser: heap overflow in ffmpeg

FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file...