PT-2020-11681

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible out of bounds read due to an integer overflow in the camera. This could lead to local information disclosure, with System execution privileges required for exploitation...

CVE-2020-0997

A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user...

CVE-2020-0997

A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user...

Remote code execution

A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user...

CVE-2020-0997 Windows Camera Codec Pack Remote Code Execution Vulnerability

...

CVE-2020-0997

CVE-2020-0997 is a Windows Camera Codec Pack remote code execution vulnerability caused by improper handling of objects in memory. An attacker could execute arbitrary code in the context of the current user, potentially taking control if the user has admin rights. Exploitation requires the user t...

CVE-2020-0997: Out-of-bounds Write

A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user...

Microsoft Windows Camera Codec Pack Image Processing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the camera codec...

CVE-2020-11129: Use After Free

u'During the error occurrence in capture request, the buffer is freed and later accessed causing the camera APP to fail due to memory use-after-free' in Snapdragon Consumer IOT, Snapdragon Mobile in Bitra, Kamorta, QCS605, Saipan, SDM710, SM8250, SXR2130...

PT-2020-12566

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions affected versions not specified Description The issue occurs during an error in a capture request, where a buffer is freed and then accessed again, resulting in a memory use-after-free condition. This causes the...

Windows Camera Codec Pack Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user...

PT-2020-3897 · Microsoft · Windows Camera Codec Pack +1

Name of the Vulnerable Software and Affected Versions: Windows Camera Codec Pack affected versions not specified Description: A remote code execution issue exists due to improper handling of objects in memory by the Windows Camera Codec Pack. This could allow an attacker to run arbitrary code in...

JVN#32396594: Yodobashi App for Android fails to restrict access permissions

Yodobashi App for Android provided by Yodobashi Camera Co.,Ltd. implements the function to access a requested URL using an Intent. This function contains an improper access control vulnerability CWE-284 that may allow the vulnerable App to receive an Intent from an arbitrary App and to access an...

SUSE-SU-2020:2499-1 Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP3)

This update for the Linux Kernel 4.4.180-94116 fixes several issues. The following security issues were fixed: - CVE-2020-14331: Fixed a buffer over-write in vgaconscroll bsc1174247. - CVE-2019-16746: Fixed a buffer overflow in net/wireless/nl80211.c bsc1173659. - CVE-2020-11668: Fixed a memory...

D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability

The DCS-2530L and DCS-2670L are Full HD 180-degree Wi-Fi cameras from D-Link. A command injection vulnerability exists in cgi-bin/ddnsenc.cgi in the D-Link DCS-2530L and DCS-2670L. The vulnerability stems from a network system or product not properly filtering specific elements of externally...

Cisco Video Surveillance Series 8000 Code Execution

The vulnerability of the Cisco Discovery protocol implemented in Cisco Video Surveillance IP cameras of the 8000 series exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a restart of the vulnerable IP...

Dopple-Ganging Up on Facial Recognition

ARCHIVED STORY Dopple-ganging up on Facial Recognition Systems By Steve Povolny · August 25, 2020 Co-authored with Jesse Chick, OSU Senior and Former McAfee Intern, Primary Researcher. Special thanks to Dr. Catherine Huang, McAfee Advanced Analytics Team Special thanks to Kyle Baldes, Former McAf...

FLIR AX8 Thermal Camera Arbitrary File Disclosure

An information disclosure vulnerability exists in FLIR. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

iOS14 shows Instagram opens camera even when users scroll photo feed

By Zara Khan iPhone's iOS14 shows that Instagram opens the user's camera even when... This is a post from HackRead.com Read the original post: iOS14 shows Instagram opens camera even when users scroll photo feed...

CVE-2020-11624

An issue was discovered in AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838 and Night Vision HD Indoor/Outdoor Mini IP Bullet Camera HD438. They do not require users to change the default password for the admin account. They only show a pop-up window suggesting a change but...