196 matches found
[SECURITY] Fedora 20 Update: nas-1.9.3-9.fc20
In a nutshell, NAS is the audio equivalent of an X display server. The Network Audio System NAS was developed by NCD for playing, recording, and manipulating audio data over a network. Like the X Window System, it uses the client/server model to separate applications from the specific drivers tha...
CVE-2013-2276
The avcodecdecodeaudio4 function in utils.c in libavcodec in FFmpeg before 1.1.3 does not verify the decoding state before proceeding with certain skip operations, which allows remote attackers to cause a denial of service out-of-bounds array access and application crash or possibly have...
CVE-2013-2276
The avcodecdecodeaudio4 function in utils.c in libavcodec in FFmpeg before 1.1.3 does not verify the decoding state before proceeding with certain skip operations, which allows remote attackers to cause a denial of service out-of-bounds array access and application crash or possibly have...
CVE-2013-2276
The avcodecdecodeaudio4 function in utils.c in libavcodec in FFmpeg before 1.1.3 does not verify the decoding state before proceeding with certain skip operations, which allows remote attackers to cause a denial of service out-of-bounds array access and application crash or possibly have...
CVE-2013-2276
The avcodecdecodeaudio4 function in utils.c in libavcodec in FFmpeg before 1.1.3 does not verify the decoding state before proceeding with certain skip operations, which allows remote attackers to cause a denial of service out-of-bounds array access and application crash or possibly have...
Mozilla: Heap memory corruption issues found using Address Sanitizer (MFSA 2012-86)
Heap-based buffer overflow in the nsWaveReader::DecodeAudioData function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors...
Mozilla: Heap memory corruption issues found using Address Sanitizer (MFSA 2012-86)
Heap-based buffer overflow in the nsWaveReader::DecodeAudioData function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors...
Scientific Linux Security Update : libvorbis on SL3.x, SL4.x, SL5.x i386/x86_64
Will Drewry of the Google Security Team reported several flaws in the way libvorbis processed audio data. An attacker could create a carefully crafted OGG audio file in such a way that it could cause an application linked with libvorbis to crash, or execute arbitrary code when it was opened...
Heap overflow
Heap-based buffer overflow in the Cisco WebEx Recording Format WRF player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP11, T27 LD before SP32 CP2, and T28 L10N before SP1 allows remote attackers to execute arbitrary code via a crafted size field in audio data within a W...
CVE-2012-3057
Summary: CVE-2012-3057 is a heap-based buffer overflow in the Cisco WebEx Recording Format (WRF) player. A crafted size field in audio data within a WRF file could allow a remote attacker to execute arbitrary code. Affected software includes multiple WebEx WRF player builds (as listed in the vuln...
CVE-2012-3057
Heap-based buffer overflow in the Cisco WebEx Recording Format WRF player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP11, T27 LD before SP32 CP2, and T28 L10N before SP1 allows remote attackers to execute arbitrary code via a crafted size field in audio data within a W...
CVE-2011-3960
Google Chrome before 17.0.963.46 does not properly decode audio data, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...
Out-of-bounds
Google Chrome before 17.0.963.46 does not properly decode audio data, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...
HelixPlayer multiple flaws (CVE-2010-2997, CVE-2010-4375, CVE-2010-4378, CVE-2010-4379, CVE-2010-4382, CVE-2010-4383, CVE-2010-4385, CVE-2010-4386, CVE-2010-4392, CVE-2010-4376)
Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via malformed multi-rate data in an audio stream...
VUPEN Security Research - RealPlayer Audio Data Handling Buffer Overflow Vulnerability (VUPEN-SR-2010-003)
VUPEN Security Research - RealPlayer Audio Data Handling Buffer Overflow Vulnerability VUPEN-SR-2010-003 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "RealPlayer is a media player available to play, manage and download all your mp3, flash and video files" from...
Fedora Update for libfishsound FEDORA-2010-9774
Check for the Version of libfishsound OpenVAS Vulnerability Test Fedora Update for libfishsound FEDORA-2010-9774 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
[SECURITY] Fedora 13 Update: libfishsound-0.9.1-5.fc13
libfishsound provides a simple programming interface for decoding and encoding audio data using Xiph.Org codecs FLAC, Speex and Vorbis. libfishsound by itself is designed to handle raw codec streams from a lower level layer such as UDP datagrams. When these codecs are used in files, they are...
Cisco Digital Media Players unauthorized access
It's possible to inject video/audio data into remote display...
Debian: Security Advisory (DSA-1814-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
