Mandriva Linux Security Advisory : libvpx (MDVSA-2012:023-1)

A vulnerability has been found and corrected in libvpx : VP8 Codec SDK libvpx before 1.0.0 Duclair allows remote attackers to cause a denial of service application crash via 1 unspecified corrupt input or 2 by starting decoding from a P-frame, which triggers an out-of-bounds read, related to the...

CVE-2012-0823: Improper Input Validation

VP8 Codec SDK libvpx before 1.0.0 "Duclair" allows remote attackers to cause a denial of service application crash via 1 unspecified "corrupt input" or 2 by "starting decoding from a P-frame," which triggers an out-of-bounds read, related to "the clamping of motion vectors in SPLITMV blocks"...

RealNetworks RealPlayer Atrac Sample Decoding Remote Code Execution Vulnerability - Mac OS X

RealPlayer is prone to a remote code execution vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RealNetworks RealPlayer Multiple Vulnerabilities (Windows) - Feb12

This host is installed with RealPlayer which is prone to multiple vulnerabilities OpenVAS Vulnerability Test $Id: gbrealplayermultvulnwinfeb12.nasl 6018 2017-04-24 09:02:24Z teissa $ RealNetworks RealPlayer Multiple Vulnerabilities Windows - Feb12 Authors: Rachana Shetty Copyright: Copyright c 20...

RealNetworks RealPlayer Atrac Sample Decoding Remote Code Execution Vulnerability (Windows)

This host is installed with RealPlayer which is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbrealplayeratracsamplecodeexecvulnwin.nasl 5888 2017-04-07 09:01:53Z teissa $ RealNetworks RealPlayer Atrac Sample Decoding Remote Code Execution Vulnerability Windows...

RealNetworks RealPlayer Atrac Sample Decoding Remote Code Execution Vulnerability - Windows

RealPlayer is prone to a remote code execution vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

UBUNTU-CVE-2011-3015

Multiple integer overflows in the PDF codecs in Google Chrome before 17.0.963.56 allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

Microsoft Windows Indeo Codec Remote Code Execution Vulnerability (2661637)

This host is missing an important security update according to Microsoft Bulletin MS12-014. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS Windows Indeo Codec Remote Code Execution Vulnerability (2661637)

This host is missing an important security update according to Microsoft Bulletin MS12-014. OpenVAS Vulnerability Test $Id: secpodms12-014.nasl 5341 2017-02-18 16:59:12Z cfi $ MS Windows Indeo Codec Remote Code Execution Vulnerability 2661637 Authors: Madhuri D Copyright: Copyright c 2012 SecPod,...

CVE-2012-0858

The Shorten codec shorten.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary...

CVE-2012-0853

The decodeTonalComponents function in the Actrac3 codec atrac3.c in libavcodec in FFmpeg 0.7.x before 0.7.12, and 0.8.x before 0.8.11; and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service infinite loop...

CVE-2012-0859

The renderline function in the vorbis codec vorbis.c in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted Vorbis file, related to a large multiplier. NOTE: this vulnerability exists because of...

MS12-014: Vulnerability in Indeo Codec Could Allow Remote Code Execution (2661637)

The remote Windows XP host contains a version of the Indeo codec that is affected by an insecure library loading vulnerability. A remote attacker could exploit this by tricking a user into opening a legitimate file e.g., an .avi file located in the same directory as a maliciously crafted dynamic...

Microsoft Windows Indeo Codec Insecure Library Loading (MS12-014; CVE-2010-3138)

A remote code execution vulnerability has been reported in Microsoft Windows...

Fedora Update for libvpx FEDORA-2012-1147

Check for the Version of libvpx OpenVAS Vulnerability Test Fedora Update for libvpx FEDORA-2012-1147 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

[SECURITY] Fedora 15 Update: libvpx-1.0.0-1.fc15

libvpx provides the VP8 SDK, which allows you to integrate your applications with the VP8 video codec, a high quality, royalty free, open source codec deployed on millions of computers and devices worldwide...

CVE-2012-0928

The ATRAC codec in RealNetworks RealPlayer 11.x and 14.x through 14.0.7, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer 12.x before 12.0.0.1703 does not properly decode samples, which allows remote attackers to execute arbitrary code via a crafted ATRAC audio file...

Code injection

Unspecified vulnerability in the RV40 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted RV40 RealVideo video stream...

CVE-2012-0926

The RV10 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle height and width values, which allows remote attackers to execute arbitrary code via a crafted RV10 RealVideo video stream...

Code injection

The RV20 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle the frame size array, which allows remote attackers to execute arbitrary code via a crafted RV20 RealVideo video stream...