Lucene search
+L

3402 matches found

Zero Day Initiative
Zero Day Initiative
added 2012/06/06 12:00 a.m.41 views

Apple QuickTime SVQ3 Codec mb_skip_run Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Apple...

9.3CVSS4.1AI score0.04997EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
added 2012/06/06 12:00 a.m.50 views

Apple QuickTime RLE Sample Decoding Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the...

9.3CVSS4.1AI score0.04626EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2012/05/03 12:00 a.m.28 views

CVE-2012-0947

Heap-based buffer overflow in the vqadecodechunk function in the VQA codec vqavideo.c in libavcodec in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a...

6.8CVSS7.7AI score0.04686EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2012/04/16 12:00 a.m.117 views

VMware ESXi/ESX patches resolve multiple security issues (VMSA-2010-0007)

The remote ESXi is missing one or more security related Updates from VMSA-2010-0007. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

10CVSS4.7AI score0.162EPSS
SaveExploits9References1
UbuntuCve
UbuntuCve
added 2012/04/11 10:39 a.m.30 views

CVE-2012-1499

The JPEG 2000 codec jp2.c in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption, aka "out-of heap-based buffer write."...

9.3CVSS7.5AI score0.05081EPSS
SaveExploits0References3
Prion
Prion
added 2012/04/11 10:39 a.m.20 views

Heap overflow

The JPEG 2000 codec jp2.c in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption, aka "out-of heap-based buffer write."...

9.3CVSS8.1AI score0.05081EPSS
SaveExploits0References8Affected Software1
zdt
zdt
added 2012/04/03 12:00 a.m.20 views

K-Lite Mega Codec Pack 5.7.0 (.avi) use-after-free vulnerability

Exploit for windows platform in category local exploits Application :K-Lite Mega Codec Pack 5.7.0 .avi use-after-free vulnerability Auther : Senator of Pirates E-Mail : email protected FaceBook : /SenatorofPirates Bug : ---- Registers: eax=aa000080 ebx=00000000 ecx=719b3800 edx=00100000...

6.8AI score
SaveExploits0
OpenVAS
OpenVAS
added 2012/04/02 12:00 a.m.30 views

Fedora Update for libvpx FEDORA-2011-11057

Check for the Version of libvpx OpenVAS Vulnerability Test Fedora Update for libvpx FEDORA-2011-11057 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

9.3CVSS0.2AI score0.04569EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2012/04/02 12:00 a.m.20 views

Fedora Update for libvpx FEDORA-2012-1140

Check for the Version of libvpx OpenVAS Vulnerability Test Fedora Update for libvpx FEDORA-2012-1140 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2012/03/26 12:00 a.m.40 views

RealNetworks RealPlayer RV30 Sample Arbitrary Index Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks Real Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the...

10CVSS4.5AI score0.03254EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2012/03/20 12:00 a.m.34 views

RealNetworks RealPlayer Cook Codec Channel Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks Real Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the...

9.3CVSS4AI score0.02889EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2012/03/16 12:00 a.m.36 views

VMSA-2010-0018 VMware hosted products and ESX patches resolve multiple security issues

The remote ESXi is missing one or more security related Updates from VMSA-2010-0018. Summary VMware hosted products and ESX patches resolve multiple security issues. Relevant releases VMware Workstation 7.1.1 and earlier, VMware Workstation 6.5.4 and earlier, VMware Player 3.1.1 and earlier, VMwa...

9.3CVSS0.5AI score0.05844EPSS
SaveExploits4References1
OpenVAS
OpenVAS
added 2012/03/16 12:00 a.m.36 views

VMware ESXi/ESX patches resolve multiple security issues (VMSA-2010-0018)

The remote ESXi is missing one or more security related Updates from VMSA-2010-0018. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

9.3CVSS5.2AI score0.05844EPSS
SaveExploits4References1
securityvulns
securityvulns
added 2012/03/09 12:00 a.m.43 views

[ MDVSA-2012:023-1 ] libvpx

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2012:023-1 http://www.mandriva.com/security/ Package : libvpx Date : February 28, 2012 Affected: 2010.1, 2011. Problem Description: A vulnerability has been found and corrected in libvpx: VP8 Codec SDK libvpx...

5CVSS6.3AI score0.02597EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2012/03/09 12:00 a.m.27 views

Mandriva Update for libvpx MDVSA-2012:023 (libvpx)

Check for the Version of libvpx OpenVAS Vulnerability Test Mandriva Update for libvpx MDVSA-2012:023 libvpx Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

5CVSS0.02597EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2012/03/07 12:00 a.m.26 views

Mandriva Update for libvpx MDVSA-2012:023-1 (libvpx)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

5CVSS5.2AI score0.02597EPSS
SaveExploits0References2
NVD
NVD
added 2012/02/23 8:07 p.m.25 views

CVE-2012-0823

VP8 Codec SDK libvpx before 1.0.0 "Duclair" allows remote attackers to cause a denial of service application crash via 1 unspecified "corrupt input" or 2 by "starting decoding from a P-frame," which triggers an out-of-bounds read, related to "the clamping of motion vectors in SPLITMV blocks"...

5CVSS6.5AI score0.02597EPSS
SaveExploits0References6
OSV
OSV
added 2012/02/23 8:07 p.m.10 views

CVE-2012-0823

VP8 Codec SDK libvpx before 1.0.0 "Duclair" allows remote attackers to cause a denial of service application crash via 1 unspecified "corrupt input" or 2 by "starting decoding from a P-frame," which triggers an out-of-bounds read, related to "the clamping of motion vectors in SPLITMV blocks"...

6.7AI score
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2012/02/23 8:07 p.m.22 views

CVE-2012-0823

VP8 Codec SDK libvpx before 1.0.0 "Duclair" allows remote attackers to cause a denial of service application crash via 1 unspecified "corrupt input" or 2 by "starting decoding from a P-frame," which triggers an out-of-bounds read, related to "the clamping of motion vectors in SPLITMV blocks"...

5CVSS5.9AI score0.02597EPSS
SaveExploits0References3
Prion
Prion
added 2012/02/23 8:07 p.m.16 views

Out-of-bounds

VP8 Codec SDK libvpx before 1.0.0 "Duclair" allows remote attackers to cause a denial of service application crash via 1 unspecified "corrupt input" or 2 by "starting decoding from a P-frame," which triggers an out-of-bounds read, related to "the clamping of motion vectors in SPLITMV blocks"...

5CVSS7.1AI score0.02597EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder