CVE-2010-0125

RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0 through 12.0.0.1444 do not properly parse spectral data in AAC files, which has unspecified impact and remote attack vectors...

CVE-2010-4381

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0 through 12.0.0.1444 allows remote attackers to have an unspecified impact via a crafted AAC file...

VUPEN Security Research - RealPlayer AAC Data Handling Buffer Overflow Vulnerability (VUPEN-SR-2010-005)

VUPEN Security Research - RealPlayer AAC Data Handling Buffer Overflow Vulnerability VUPEN-SR-2010-005 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "RealPlayer is a media player available to play, manage and download all your mp3, flash and video files" from...

RealNetworks RealPlayer AAC MLLT Atom Parsing Remote Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists when parsing an .AAC...

RealNetworks RealPlayer AAC TIT2 Atom Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of the RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

RealPlayer for Windows < Build 12.0.1.609 Multiple Vulnerabilities

According to its build number, the installed version of RealPlayer on the remote Windows host is affected by multiple vulnerabilities: - An error in the 'Cook' codec initialization function and can be used to access uninitialized memory. CVE-2010-0121 - Freed pointer access in the handling of the...

FFmpeg多个媒体文件解析拒绝服务和代码执行漏洞

BUGTRAQ ID: 36465 CVE ID: CVE-2009-4631,CVE-2009-4632,CVE-2009-4633,CVE-2009-4634,CVE-2009-4635,CVE-2009-4636,CVE-2009-4637,CVE-2009-4638,CVE-2009-4639,CVE-2009-4640 FFmpeg是一套对音频和视频进行解码录制转换的完整方案。 ffmpeg解析各种媒体文件时存在多个空指针引用、内存越界或死循环等漏洞，可能导致拒绝服务或执行任意代码。 1 解析AVI、.ogv和.wmv文件时的空指针引用和0除数错误可能导致崩溃。 2...

Apple iTunes AAC File Handling Integer Overflow (CVE-2006-1467)

Apple iTunes is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous video and audio formats. One of the formats that the player is capable of processing is the protected advanced audio coding AAC media fil...

Mandriva Security Advisory MDVSA-2009:335 (ffmpeg)

The remote host is missing an update to ffmpeg announced via advisory MDVSA-2009:335. OpenVAS Vulnerability Test $Id: mdksa2009335.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:335 ffmpeg Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

Mandriva Security Advisory MDVSA-2009:335 (ffmpeg)

The remote host is missing an update to ffmpeg announced via advisory MDVSA-2009:335. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Apple iPhone buffer overflow

Buffer overflow in Audio Codecs on AAC and MP3 streams parsing...

CVE-2009-2206

Multiple heap-based buffer overflows in the AudioCodecs library in the CoreAudio component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted 1 AAC or 2 MP3 file, a...

Heap overflow

Multiple heap-based buffer overflows in the AudioCodecs library in the CoreAudio component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted 1 AAC or 2 MP3 file, a...

CVE-2009-2206

Multiple heap-based buffer overflows in the AudioCodecs library in the CoreAudio component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted 1 AAC or 2 MP3 file, a...

CVE-2009-2206

The CVE-2009-2206 issue affects Apple iPhone OS AudioCodecs (CoreAudio) where multiple heap-based buffer overflows occur while parsing AAC/MP3 streams. Vulnerable on iPhone OS &lt;3.1 and iPod touch

USN-710-1: xine-lib vulnerabilities

It was discovered that xine-lib did not correctly handle certain malformed Ogg and Windows Media files. If a user or automated system were tricked into opening a specially crafted Ogg or Windows Media file, an attacker could cause xine-lib to crash, creating a denial of service. This issue only...

CVE-2008-4610

MPlayer allows remote attackers to cause a denial of service application crash via 1 a malformed AAC file, as demonstrated by lol-vlc.aac; or 2 a malformed Ogg Media OGM file, as demonstrated by lol-ffplay.ogm, different vectors than CVE-2007-6718...

CVE-2008-4610

MPlayer allows remote attackers to cause a denial of service application crash via 1 a malformed AAC file, as demonstrated by lol-vlc.aac; or 2 a malformed Ogg Media OGM file, as demonstrated by lol-ffplay.ogm, different vectors than CVE-2007-6718...

DEBIAN-CVE-2008-4610

MPlayer allows remote attackers to cause a denial of service application crash via 1 a malformed AAC file, as demonstrated by lol-vlc.aac; or 2 a malformed Ogg Media OGM file, as demonstrated by lol-ffplay.ogm, different vectors than CVE-2007-6718...

Design/Logic Flaw

MPlayer, possibly 1.0rc1, allows remote attackers to cause a denial of service SIGSEGV and application crash via 1 a malformed MP3 file, as demonstrated by lol-mplayer.mp3; 2 a malformed Ogg Vorbis file, as demonstrated by lol-mplayer.ogg; 3 a malformed MPEG-1 file, as demonstrated by...