[SECURITY] [DSA 2306-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2306-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano September 11, 2011 http://www.debian.org/security/faq -...

VideoLAN VLC Media Player MKV Demuxer Code Execution

Added: 06/27/2011 CVE: CVE-2011-0531 BID: 46060 OSVDB: 70698 Background VLC media player is a media player supporting various audio and video formats for multiple platforms. Problem VideoLan VLC 1.1.6.1 and earlier are vulnerable to a remote code execution vulnerability as a result of insufficien...

VideoLAN VLC Media Player MKV Demuxer Code Execution

Added: 06/27/2011 CVE: CVE-2011-0531 BID: 46060 OSVDB: 70698 Background VLC media player is a media player supporting various audio and video formats for multiple platforms. Problem VideoLan VLC 1.1.6.1 and earlier are vulnerable to a remote code execution vulnerability as a result of insufficien...

Ubuntu Update for ffmpeg vulnerabilities USN-1104-1

Ubuntu Update for Linux kernel vulnerabilities USN-1104-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11041.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for ffmpeg vulnerabilities USN-1104-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

GGmpeg library multiple security vulnerabilities

Buffer overflow on Vorbis / WebM files decoding, memory corruption on RealMedia and VC1 files...

Ubuntu 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : ffmpeg vulnerabilities (USN-1104-1)

Cesar Bernardini and Felipe Andres Manzano discovered that FFmpeg incorrectly handled certain malformed flic files. If a user were tricked into opening a crafted flic file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of...

Ubuntu Update for libvpx vulnerability USN-1087-1

Ubuntu Update for Linux kernel vulnerabilities USN-1087-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10871.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for libvpx vulnerability USN-1087-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

VLC media player memory corruption

Memory corruption on Matroska/WebM сontainers parsing...

[SECURITY] [DSA 2159-1] vlc security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2159-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 10, 2011 http://www.debian.org/security/faq -...

Debian DSA-2159-1 : vlc - missing input sanitising

Dan Rosenberg discovered that insufficient input validation in VLC's processing of Matroska/WebM containers could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Securit...

[SECURITY] [DSA 2159-1] vlc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2159-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 10, 2011 http://www.debian.org/security/faq -...

DSA-2159-1 vlc - missing input sanitising

Bulletin has no description...

VideoLAN VLC Media Player 1.1.6 - 'MKV' Memory Corruption (Metasploit)

$Id: vlcwebm.rb 11725 2011-02-08 18:22:36Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

DEBIAN-CVE-2011-0531

demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of service crash and execute arbitrary commands via a crafted MKV WebM or Matroska file that triggers memory corruption, related to "class mismatching" and the...

VideoLAN VLC MKV Memory Corruption

This module exploits an input validation error in VideoLAN VLC 'VideoLAN VLC MKV Memory Corruption', 'Description' = %q This module exploits an input validation error in VideoLAN VLC MSFLICENSE, 'Author' = 'Dan Rosenberg' , 'References' = 'OSVDB', '70698' , 'CVE', '2011-0531' , 'BID', '46060' ,...

VideoLAN VLC MKV Memory Corruption

$Id: vlcwebm.rb 11692 2011-02-01 18:54:24Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

VLC Media Player < 1.1.7 MKV Input Validation Vulnerability

The version of VLC media player installed on the remote host is earlier than 1.1.7. Such versions are reportedly affected by the following vulnerability : - Insufficient input validation when parsing a specially crafted Matroska or WebM MKV file can be exploited to execute arbitrary code. C Tenab...

vlc -- Insufficient input validation in MKV demuxer

VLC team reports: When parsing an invalid MKV Matroska or WebM file, input validation are insufficient...

CVE-2011-0480

Multiple buffer overflows in vorbisdec.c in the Vorbis decoder in FFmpeg, as used in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, allow remote attackers to cause a denial of service memory corruption and application crash or possibly have unspecified other impact via a craft...

DEBIAN-CVE-2011-0480

Multiple buffer overflows in vorbisdec.c in the Vorbis decoder in FFmpeg, as used in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, allow remote attackers to cause a denial of service memory corruption and application crash or possibly have unspecified other impact via a craft...