GStreamer gst_asf_demux_process_ext_stream_props function denial of service vulnerability

GStreamer is an open source multimedia framework. GStreamer has a security vulnerability in the gst-plugins-ugly/gst/asfdemux/gstasfdemux.c/gstasfdemuxprocessextstreamprops function, which causes a denial of service for remote attackers...

GStreamer gst_asf_demux_process_ext_content_desc function denial of service vulnerability

GStreamer is an open source multimedia framework. A denial of service vulnerability exists in the GStreamer gstasfdemuxprocessextcontentdesc function, which could cause a denial of service by a remote attacker...

DEBIAN-CVE-2017-5847

The gstasfdemuxprocessextcontentdesc function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer allows remote attackers to cause a denial of service out-of-bounds heap read via vectors involving extended content descriptors...

CVE-2017-5844

The gstriffcreateaudiocaps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service floating point exception and crash via a crafted ASF file...

CVE-2017-5844

The gstriffcreateaudiocaps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service floating point exception and crash via a crafted ASF file...

ALPINE-CVE-2017-5847

The gstasfdemuxprocessextcontentdesc function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer allows remote attackers to cause a denial of service out-of-bounds heap read via vectors involving extended content descriptors...

ALPINE-CVE-2017-5846

The gstasfdemuxprocessextstreamprops function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer before 1.10.3 allows remote attackers to cause a denial of service invalid memory read and crash via vectors related to the number of languages in a video file...

CVE-2017-5847

The gstasfdemuxprocessextcontentdesc function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer allows remote attackers to cause a denial of service out-of-bounds heap read via vectors involving extended content descriptors...

Code injection

The gstriffcreateaudiocaps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service floating point exception and crash via a crafted ASF file...

CVE-2017-5844

The gstriffcreateaudiocaps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service floating point exception and crash via a crafted ASF file...

CVE-2017-5844

The gstriffcreateaudiocaps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service floating point exception and crash via a crafted ASF file...

CVE-2017-5844

The gstriffcreateaudiocaps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service floating point exception and crash via a crafted ASF file...

CVE-2017-5846

CVE-2017-5846 affects GStreamer gst-plugins-ugly before 1.10.3, where gst_asf_demux_process_ext_stream_props in gst/asfdemux/gstasfdemux.c can trigger an invalid memory read and crash when processing video files with a certain number of languages. Impact described as denial of service; remote att...

CVE-2017-5844

The gstriffcreateaudiocaps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service floating point exception and crash via a crafted ASF file...

CVE-2017-5844

The gstriffcreateaudiocaps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service floating point exception and crash via a crafted ASF file...

asf-fr.org XSS vulnerability

Vulnerable URL: http://www.asf-fr.org/search?term=%3Cimg%20src%3Dx%20onerror%3Dprompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1732556 VIP website...

Apache Httpd < 2.2.32 : HTTP_PROXY environment variable "httpoxy" mitigation

HTTPPROXY is a well-defined environment variable in a CGI process, which collided with a number of libraries which failed to avoid colliding with this CGI namespace. A mitigation is provided for the httpd CGI environment to avoid populating the "HTTPPROXY" variable from a "Proxy:" header, which h...

ASF-Abfallmanager - Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application ASF-Abfallmanager published at the 'play' market has multiple vulnerabilities...

The vulnerability of the FFmpeg multimedia library, which allows a intruder to trigger a service failure or cause other effects

The vulnerability of the asfwritepacket function libavformat/asfenc.c in the FFmpeg multimedia library is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to cause a service failure, or possibly have other effects using a specially crafted PTS value contained in...

FFmpeg 'asf_write_packet' function integer overflow vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. An integer overflow vulnerability in the 'asfwritepacket' function in the libavformat/asfenc.c file of FFmpeg allows remote attackers to build special .mov files to crash the application...