Arbitrary Code Execution Vulnerability in CoreMedia Playback Component of Multiple Apple Products

Apple iOS, watchOS, macOS, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; watchOS is a smartwatch operating system; CoreMedia Playback is one of the multimedia playback controller components. A security vulnerability exists in the CoreMedia...

Mozilla Firefox and Firefox ESR Denial of Service Vulnerability (CNVD-2016-06138)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A denial of service vulnerability exists in Mozilla Firefox versions prior to 48.0 and Firefox ES...

Apple QuickTime Denial of Service Vulnerability (CNVD-2016-00193)

Apple QuickTime is a multimedia playback software developed by Apple. The program is capable of handling a wide range of resources such as digital video, media passages, and more. A security vulnerability exists in Apple QuickTime versions prior to 7.7.9. A remote attacker can exploit this...

Apple QuickTime Denial of Service Vulnerability (CNVD-2016-00195)

Apple QuickTime is a multimedia playback software developed by Apple. The program is capable of handling a wide range of resources such as digital video, media passages, and more. A security vulnerability exists in Apple QuickTime versions prior to 7.7.9. A remote attacker can exploit this...

Apple QuickTime Denial of Service Vulnerability (CNVD-2016-00196)

Apple QuickTime is a multimedia playback software developed by Apple. The program is capable of handling a wide range of resources such as digital video, media passages, and more. A security vulnerability exists in Apple QuickTime versions prior to 7.7.9. A remote attacker can exploit this...

Apple QuickTime Denial of Service Vulnerability (CNVD-2016-00194)

Apple QuickTime is a multimedia playback software developed by Apple. The program is capable of handling a wide range of resources such as digital video, media passages, and more. A security vulnerability exists in Apple QuickTime versions prior to 7.7.9. A remote attacker can exploit this...

Apple QuickTime Denial of Service Vulnerability (CNVD-2016-00192)

Apple QuickTime is a multimedia playback software developed by Apple. The program is capable of handling a wide range of resources such as digital video, media passages, and more. A security vulnerability exists in Apple QuickTime versions prior to 7.7.9. A remote attacker can exploit this...

Apple QuickTime Denial of Service Vulnerability (CNVD-2016-00191)

Apple QuickTime is a multimedia playback software developed by Apple. The program is capable of handling a wide range of resources such as digital video, media passages, and more. A security vulnerability exists in Apple QuickTime versions prior to 7.7.9. A remote attacker can exploit this...

WordPress Cool Video Gallery 1.9 Command Injection Vulnerability

WordPress Cool Video Gallery plugin version 1.9 suffers from a remote command injection vulnerability. Title: Command Injection in cool-video-gallery v1.9 Wordpress plugin Author: Larry W. Cashdollar, @larry0 Download Site: https://wordpress.org/plugins/cool-video-gallery/ Vendor:...

Stagefrightened?

Posted by Mark Brand, Bypasser of Mitigations There’s been a lot of attention recently around a number of vulnerabilities in Android’s libstagefright. There’s been a lot of confusion about the remote exploitability of the issues, especially on modern devices. In this blog post we will demonstrate...

Integer overflow

Integer overflow in libstagefright in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow and out-of-bounds read via an MP4 video file containing invalid metadata...

Mozilla Firefox < 36.0 Multiple Vulnerabilities

Binary data 8653.prm...

Xiaomi smart home solutions”guest user”override control vulnerability-vulnerability warning-the black bar safety net

Millet always let a person countless daydream, it's each of the goods are the people to whom surprised. Xiaomi smart home solution,using a lot of hardware interaction, etc., giving users a very good experience. ! t01e2d571016343efa1. png In provide great convenience at the same time also introduc...

Ubuntu: Security Advisory (USN-2454-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[USN-2454-1] Exiv2 vulnerability

========================================================================== Ubuntu Security Notice USN-2454-1 January 07, 2015 exiv2 vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

USN-2454-1: Exiv2 vulnerability

It was discovered that Exiv2 incorrectly handled certain tag values in video files. If a user or automated system were tricked into opening a specially-crafted video file, a remote attacker could cause Exiv2 to crash, resulting in a denial of service...

[SECURITY] Fedora 20 Update: drupal6-filefield-3.12-1.fc20

FileField provides a universal file upload field for CCK. It is a robust alternative to core's Upload module and an absolute must for users uploadin g a large number of files. Great for managing video and audio files for podcast s on your own site. Optional: APC php-pecl-apcu uploadprogress...

PT-2011-4432 · Microsoft · Windows Media Center +5

Name of the Vulnerable Software and Affected Versions: Windows Media Player versions in Microsoft Windows XP SP2 and SP3, Windows Vista SP2, and Windows 7 Gold and SP1 Description: A remote code execution issue exists in the way Windows Media Player and Windows Media Center handle .dvr-ms files...

Flash 0day Exploit Analysis-exploit warning-the black bar safety net

The number of days before the network broke to take advantage of the latest“Flash Media loophole”hanging horse attack page, this vulnerability affects Adobe Flash Player 10.3.183.5 the following version, you want to know on this Wednesday before 1 0. 3. 1 8 3. 5 is flash highest version, even if...

Google Chrome multiple vulnerabilities

Overview Google Chrome contains multiple vulnerabilities that can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Google Chrome stable channel versions prior to 8.0.552.237 contain multiple memory corruption vulnerabilities. These...