24 matches found
Google Chrome < 4.2.77.14 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 4.2.77.14. It is, therefore, affected by multiple vulnerabilities as referenced in the 201504stable-channel-update14 advisory. - Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.90 allow attackers ...
EUVD-2012-0690
Malware in sbrugna...
EUVD-2015-1377
Malware in sbrugna...
EUVD-2020-3909
Malware in sbrugna...
EUVD-2018-13540
Malware in sbrugna...
[SECURITY] [DLA 2845-1] libsamplerate security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2845-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz December 14, 2021 https://wiki.debian.org/LTS -...
Use-After-Free
GPAC is vulnerable to use-after-free. The vulnerability existed because audiosampleentryRead in isomedia/boxcodebase.c is arbitrary on when to make gfisomboxdel calls...
Denial Of Service (DoS)
gpac is vulnerable to denial of service DoS. The vulnerability exists in audiosampleentryAddBox function in isomedia/boxcodebase.c, allowing a malicious user to cause an application crash via a crafted file...
GPAC Resource Management Error Vulnerability (CNVD-2020-23405)
GPAC is an open source multimedia framework. A resource management error vulnerability exists in the libgpac.a file in GPAC version 0.8.0, which stems from a failure of audiosampleentryRead in the isomedia/boxcodebase.c file to correctly determine when to make a gfisomboxdel call. An attacker cou...
DEBIAN-CVE-2020-11558
An issue was discovered in libgpac.a in GPAC 0.8.0, as demonstrated by MP4Box. audiosampleentryRead in isomedia/boxcodebase.c does not properly decide when to make gfisomboxdel calls. This leads to various use-after-free outcomes involving mdiaRead, gfisomdeletemovie, and gfisomparsemovieboxes...
UBUNTU-CVE-2020-11558
An issue was discovered in libgpac.a in GPAC 0.8.0, as demonstrated by MP4Box. audiosampleentryRead in isomedia/boxcodebase.c does not properly decide when to make gfisomboxdel calls. This leads to various use-after-free outcomes involving mdiaRead, gfisomdeletemovie, and gfisomparsemovieboxes...
CVE-2020-11558
An issue was discovered in libgpac.a in GPAC 0.8.0, as demonstrated by MP4Box. audiosampleentryRead in isomedia/boxcodebase.c does not properly decide when to make gfisomboxdel calls. This leads to various use-after-free outcomes involving mdiaRead, gfisomdeletemovie, and gfisomparsemovieboxes...
CVE-2020-11558
An issue was discovered in libgpac.a in GPAC 0.8.0, as demonstrated by MP4Box. audiosampleentryRead in isomedia/boxcodebase.c does not properly decide when to make gfisomboxdel calls. This leads to various use-after-free outcomes involving mdiaRead, gfisomdeletemovie, and gfisomparsemovieboxes...
GPAC Buffer Overflow Vulnerability (CNVD-2019-40502)
GPAC is a multimedia framework for rich media and distributed under the LGPL license. A heap buffer overflow vulnerability exists in audiosampleentryAddBox in isomedia/boxcodebase.c in GPAC 0.7.1. An attacker could exploit this vulnerability via specially crafted files to cause a denial of servic...
DEBIAN-CVE-2018-21016
audiosampleentryAddBox at isomedia/boxcodebase.c in GPAC 0.7.1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...
UBUNTU-CVE-2018-21016
audiosampleentryAddBox at isomedia/boxcodebase.c in GPAC 0.7.1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...
PT-2019-10441 · Gpac · Gpac
Name of the Vulnerable Software and Affected Versions: GPAC version 0.7.1 Description: The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, via a crafted file. This is related to the audio sample entry AddBox function at...
Bento4 Buffer Overflow Vulnerability (CNVD-2019-07062)
Bento4 is an open source C++ library for reading and writing MP4 files. A buffer overflow vulnerability exists in the 'AP4Mpeg2TsAudioSampleStream::WriteSample' function in the Core/Ap4Mpeg2Ts.cpp file in Bento4 version 1.5.1-624, which can be exploited by an attacker to can be exploited to cause...
CVE-2015-1236
The MediaElementAudioSourceNode::process function in modules/webaudio/MediaElementAudioSourceNode.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy and obtain sensitive audio sample values via a...
CVE-2015-1236
The MediaElementAudioSourceNode::process function in modules/webaudio/MediaElementAudioSourceNode.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy and obtain sensitive audio sample values via a...