1376 matches found
mybb -- vulnerabilities
mybb Team reports: High risk: Image MyCode “alt” attribute persistent XSS. Medium risk: RSS Atom 1.0 item title persistent XSS...
[SECURITY] Fedora 28 Update: php-zendframework-zend-feed-2.10.3-1.fc28
Zend\Feed provides functionality for consuming RSS and Atom feeds. It provides a natural syntax for accessing elements of feeds, feed attribut es, and entry attributes. Zend\Feed also has extensive support for modifying fe ed and entry structure with the same natural syntax, and turning the resul...
Intel Smart Sound Tech Vulnerable to Three High-Severity Bugs
Intel issued three fixes for bugs that could allow a local attacker to execute code on Intel Core and Atom processor-based PCs. The vulnerabilities are tied to versions of its own Intel Smart Sound Technology, used to boost audio processing for tasks such as voice commands and interactions with...
Bento4 Buffer Overflow Vulnerability (CNVD-2018-14699)
Bento4 is an open source C++ library for reading and writing MP4 files. A heap buffer overflow vulnerability exists in AP4AvccAtom::Create in the Core/Ap4AvccAtom.cpp file in Bento4 version 1.5.1-624. An attacker can exploit this vulnerability to cause a heap buffer out-of-bounds read...
UBUNTU-CVE-2018-14584
An issue has been discovered in Bento4 1.5.1-624. AP4AvccAtom::Create in Core/Ap4AvccAtom.cpp has a heap-based buffer over-read...
UBUNTU-CVE-2018-14531
An issue was discovered in Bento4 1.5.1-624. There is an unspecified "heap-buffer-overflow" crash in the AP4HvccAtom class in Core/Ap4HvccAtom.cpp...
Bento4 Buffer Overflow Vulnerability (CNVD-2019-05132)
Bento4 is a C++ class library and tool for reading and writing ISO-MP4 files. A heap buffer overflow vulnerability exists in the AP4HvccAtom class in Core/Ap4HvccAtom.cpp in Bento4 1.5.1-624, which can be exploited by an attacker to cause a denial of service...
MP4v2 Denial of Service Vulnerability (CNVD-2018-21112)
MP4v2 is an open source library written in C++ for handling MP4 containers. A security vulnerability exists in the 'MP4Atom::factory' function of the mp4atom.cpp file in MP4v2 version 2.0.0, which stems from the program failing to properly use the MP4ItemAtom data type. A remote attacker can...
CVE-2018-14403
MP4NameFirstMatches in mp4util.cpp in MP4v2 2.0.0 mishandles substrings of atom names, leading to use of an inappropriate data type for associated atoms. The resulting type confusion can cause out-of-bounds memory access...
Type confusion
MP4NameFirstMatches in mp4util.cpp in MP4v2 2.0.0 mishandles substrings of atom names, leading to use of an inappropriate data type for associated atoms. The resulting type confusion can cause out-of-bounds memory access...
UBUNTU-CVE-2018-14403
MP4NameFirstMatches in mp4util.cpp in MP4v2 2.0.0 mishandles substrings of atom names, leading to use of an inappropriate data type for associated atoms. The resulting type confusion can cause out-of-bounds memory access...
CVE-2018-14403
MP4v2 vulnerability CVE-2018-14403 affects MP4NameFirstMatches in mp4util.cpp (MP4v2 2.0.0). The issue involves mishandling substrings of atom names, causing a type confusion that can lead to out-of-bounds memory access. Multiple connected advisories confirm this family of issues within MP4v2 2.0...
UBUNTU-CVE-2018-14379
MP4Atom::factory in mp4atom.cpp in MP4v2 2.0.0 incorrectly uses the MP4ItemAtom data type in a certain case where MP4DataAtom is required, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted MP4 file, because access ...
PT-2018-12476 · Mp4V2 · Mp4V2
Name of the Vulnerable Software and Affected Versions: MP4v2 version 2.0.0 Description: The issue arises from a type confusion in the MP4Atom::factory function within mp4atom.cpp, where MP4ItemAtom is used instead of the required MP4DataAtom. This confusion occurs when handling a crafted MP4 file...
Integer overflow
In MP4v2 2.0.0, there is an integer overflow with resultant memory corruption when resizing MP4Array for the ftyp atom in mp4array.h...
CVE-2018-14326
In MP4v2 2.0.0, there is an integer overflow with resultant memory corruption when resizing MP4Array for the ftyp atom in mp4array.h...
CVE-2018-14326
In MP4v2 2.0.0, there is an integer overflow with resultant memory corruption when resizing MP4Array for the ftyp atom in mp4array.h...
CVE-2018-14326
In MP4v2 2.0.0, there is an integer overflow with resultant memory corruption when resizing MP4Array for the ftyp atom in mp4array.h...
PT-2018-12441 · Mp4V2 · Mp4V2
Name of the Vulnerable Software and Affected Versions: MP4v2 version 2.0.0 Description: The issue is related to an integer overflow that results in memory corruption when resizing MP4Array for the ftyp atom in mp4array.h. Recommendations: For MP4v2 version 2.0.0, at the moment, there is no...
