CVE-2020-36129

AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aomimage.c...

CVE-2020-36134

AOM v2.0.1 was discovered to contain a segmentation violation via the component aomdsp/x86/obmcsadavx2.c...

MGASA-2021-0482 Updated aom packages fix security vulnerability

aomdsp/graintable.c in libaom in AOMedia before 2021-03-30 has a use-after-free. CVE-2021-30474...

Denial Of Service

aom is vulnerable to denial of service. The vulnerability exists due to the system freeing memory that is not located on the heap...

Fedora: Security Advisory for aom (FEDORA-2021-1c3f7963a5)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for rust-aom-sys (FEDORA-2021-1c3f7963a5)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 34 Update: rust-aom-sys-0.2.1-5.fc34

FFI bindings to aom...

UBUNTU-CVE-2021-30473

aomimage.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap...

Understanding Emerging Video Formats

In my previous post, we discussed two new image formats: High-Efficiency Image File HEIF and AV1 Image File AVIF. In this article, we'll take a closer look at two emerging video formats built on the same foundations. Akamai Image & Video Manager IVM already supports the key video codecs H.264,...

CVE-2015-8611

BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, and PEM 12.0.0 before HF1 on the 2000, 4000, 5000, 7000, and 10000 platforms do not properly sync passwords with the Always-On Management AOM subsystem, which might allow remote attackers to obtain login access to AOM via an 1 expir...

Default credentials

BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, and PEM 12.0.0 before HF1 on the 2000, 4000, 5000, 7000, and 10000 platforms do not properly sync passwords with the Always-On Management AOM subsystem, which might allow remote attackers to obtain login access to AOM via an 1 expir...

CVE-2015-8611

BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, and PEM 12.0.0 before HF1 on the 2000, 4000, 5000, 7000, and 10000 platforms do not properly sync passwords with the Always-On Management AOM subsystem, which might allow remote attackers to obtain login access to AOM via an 1 expir...

F5 BIG-IP - BIG-IP AOM password sync vulnerability CVE-2015-8611

The remote host is missing a security patch. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/h:f5:big-ip"; if description...

Adobe Download Manager AOM File Section Name Buffer Overflow (CVE-2006-5856)

Adobe produces and distributes a custom Download Manager utility which is usually utilized for Adobe product updates and downloads. The Download Manager normally sets up file association entries in the Windows registry upon installation that associate it with the AOM file type. A buffer overflow...

SOL10509 - Sockstress DoS tool vulnerability CVE-2008-4609

Sockstress DoS tool CVE-2008-4609. The TCP implementation in 1 Linux, 2 platforms based on BSD Unix, 3 Microsoft Windows, 4 Cisco products, and probably other operating systems allows remote attackers to cause a denial of service connection queue exhaustion via multiple vectors that manipulate...

CVE-2009-3057

Multiple cross-site scripting XSS vulnerabilities in AOM Software Beex 3 allow remote attackers to inject arbitrary web script or HTML via the navaction parameter to 1 news.php and 2 partneralle.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in AOM Software Beex 3 allow remote attackers to inject arbitrary web script or HTML via the navaction parameter to 1 news.php and 2 partneralle.php...

CVE-2009-3057

CVE-2009-3057 affects AOM Software Beex 3. The vulnerability is multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via the navaction parameter to the vulnerable pages (1) news.php and (2) partneralle.php). The connected documents specify t...

CVE-2009-3057

Multiple cross-site scripting XSS vulnerabilities in AOM Software Beex 3 allow remote attackers to inject arbitrary web script or HTML via the navaction parameter to 1 news.php and 2 partneralle.php...

Adobe Download Manager < 2.2 AOM File Handling Section Name Overflow

There is a version Adobe Download Manager installed on the remote Windows host that is vulnerable to a remote buffer overflow attack because the application fails to perform boundary checks while processing AOM files. In order to trigger this issue, an attacker needs to entice a user to visit a...