1217 matches found
SUSE CVE-2019-7577
SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in SDLLoadWAVRW in audio/SDLwave.c...
SUSE CVE-2019-7578
SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitIMAADPCM in audio/SDLwave.c...
SUSE CVE-2019-1010317
WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseCaffHeaderConfig caff.c:486. The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit...
SUSE CVE-2020-23903
A Divide by Zero vulnerability in the function static int readsamples of Speex v1.2 allows attackers to cause a denial of service DoS via a crafted WAV file...
SUSE CVE-2021-3246
A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file...
Ransomware and wiper signed with stolen certificates
Introduction On July 17, 2022, Albanian news outlets reported a massive cyberattack that affected Albanian government e-services. A few weeks later, it was revealed that the cyberattacks were part of a coordinated effort likely intended to cripple the countrys computer systems. On September 10,...
Forrester names Microsoft a Leader in Q4 2022 Security Analytics Platforms Wave report
We’re excited to announce that Microsoft is named a Leader in The Forrester Wave: Security Analytics Platforms, Q4 2022. Microsoft achieved the highest possible score in 17 different criteria, including partner ecosystem, innovation roadmap, product security, case management, and architecture. Wi...
Forrester names Microsoft a Leader in Q4 2022 Security Analytics Platforms Wave report
We’re excited to announce that Microsoft is named a Leader in The Forrester Wave: Security Analytics Platforms, Q4 2022. Microsoft achieved the highest possible score in 17 different criteria, including partner ecosystem, innovation roadmap, product security, case management, and architecture. Wi...
Update 16.19 for Microsoft Dynamics 365 Business Central 2020 Release Wave 1 (Application Build 16.19.49472, Platform Build 16.0.49350)
None None...
Update 19.14 for Microsoft Dynamics 365 Business Central (on-premises) 2021 Release Wave 2 (Application Build 19.14.49970, Platform Build 19.0.49925)
None None...
Update 15.17 for Microsoft Dynamics 365 Business Central 2019 Release Wave 2 (Application Build 15.17.49440, Platform Build 15.0.49431)
None None...
Update 21.2 for Microsoft Dynamics 365 Business Central (on-premises) 2022 Release Wave 2 (Application Build 21.2.49990, Platform Build 21.0.49984)
None None...
Released Updates for Microsoft Dynamics 365 Business Central 2019 Release Wave 2
None Summary This article lists cumulative updates which have been released for Microsoft Dynamics 365 Business Central.A cumulative update is a cumulative set of files that includes all hotfixes and regulatory features that have been released for Microsoft Dynamics 365 Business Central.The lates...
speex: divide by zero in read_samples() via crafted WAV file
A divide-by-zero flaw was found in speex within the readsamples at src/speexenc.c function. This flaw allows a malicious user to provide a crafted wav file and crash the speexenc utility, resulting in a denial of service. The highest threat from this vulnerability is to system availability...
Update 21.1 for Microsoft Dynamics 365 Business Central (on-premises) 2022 Release Wave 2 (Application Build 21.1.48638, Platform Build 21.0.48504)
None None...
Update 20.7 for Microsoft Dynamics 365 Business Central (on-premises) 2022 Release Wave 1 (Application Build 20.7.48483, Platform Build 20.0.48457)
None None...
The vulnerability of the Video microprogramming system component in Qualcomm’s embedded chips allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the Video microprogramming software component in Qualcomm’s embedded chips relates to the copying of buffers without checking the size of the input data during the processing of WAV files. Exploiting this vulnerability can allow an attacker to cause service failures or execut...
wave-publishers.co.jp Cross Site Scripting vulnerability OBB-2934143
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
TOTOLINK A3002R Buffer Overflow Vulnerability
The TOTOLINK A3002R is a wireless dual-band Gigabit router from China's TOTOLINK that complies with the latest IEEE802.11ac Wave 2 standard. The TOTOLINK A3002R suffers from a buffer overflow vulnerability that can be exploited by attackers to cause a denial of service...
