Google Fixes 13 Flaws in Chrome

Just a few days after releasing a fairly large set of patches for its Chrome browser, Google has pushed out another update, fixing 13 vulnerabilities, more than half of them being high-severity bugs. The newest version of Chrome also includes an updated version of Adobe Flash that has a fix for a...

CVE-2011-3015: Integer Overflow or Wraparound

Multiple integer overflows in the PDF codecs in Google Chrome before 17.0.963.56 allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

Chrome Stable Update

The Chrome Stable channel has been updated to 17.0.963.56 on Windows, Mac, Linux and Chrome Frame. This release fixes a number of stability and security issues in Chrome, and also includes a new version of Flash. More info on the Flash update is available from Adobe. Security fixes and rewards:...

[SECURITY] Fedora 16 Update: audacious-plugins-3.0.2-2.fc16

This package provides essential plugins for the Audacious audio player. Audacious is an advanced audio player. It is free, lightweight, based on GTK2, runs on Linux and many other nix platforms and is focused on audio quality and supporting a wide range of audio codecs. It still features an...

[SECURITY] Fedora 14 Update: audacious-plugins-2.4.5-4.fc14

This package provides essential plugins for the Audacious audio player. Audacious is an advanced audio player. It is free, lightweight, based on GTK2, runs on Linux and many other nix platforms and is focused on audio quality and supporting a wide range of audio codecs. It still features an...

[SECURITY] Fedora 15 Update: audacious-plugins-2.5.4-2.fc15

This package provides essential plugins for the Audacious audio player. Audacious is an advanced audio player. It is free, lightweight, based on GTK2, runs on Linux and many other nix platforms and is focused on audio quality and supporting a wide range of audio codecs. It still features an...

Cisco Security Advisory: Denial of Service Vulnerability in Cisco TelePresence Codecs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Denial of Service Vulnerability in Cisco TelePresence Codecs Advisory ID: cisco-sa-20110831-tandberg Revision 1.0 For Public Release 2011 August 31 1600 UTC GMT...

Denial of Service Vulnerability in Cisco TelePresence Codecs

...

CVE-2011-2577: Undefined Security Weakness

Unspecified vulnerability in Cisco TelePresence C Series Endpoints, E/EX Personal Video units, and MXP Series Codecs, when using software versions before TC 4.0.0 or F9.1, allows remote attackers to cause a denial of service crash via a crafted SIP packet to port 5060 or 5061, aka Bug ID CSCtq465...

Get Your New Video Codecs–and Scareware

Scareware gangs have been using pretty much the same tactics since the dawn of time. Or at least since 2005. They compromise Web sites, use them as jumping off points for pop-up boxes that aim to terrify the citizenry into thinking their PCs are infected and downloading fake security software. Bu...

ESTsoft ALPlayer 2.0 ASX Playlist File Handling Buffer Overflow Vulnerability

Summary ALPlayer former ALShow is an easy-to-use media player that comes equipped with plenty of codecs, and it's prepared to download more if needed. Description The vulnerability is caused due to a boundary error in the processing of a playlist file , which can be exploited to cause a stack-bas...

Code injection

The MPEG-4 codec in the Windows Media codecs in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 does not properly handle crafted media content with MPEG-4 video encoding, which allows remote attackers to execute arbitrary code via a file in an...

PT-2010-2544 · Microsoft · Vista +5

Name of the Vulnerable Software and Affected Versions: Windows Media codecs versions in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 Description: A remote code execution issue exists due to improper handling of crafted media content with MPEG-...

CVE-2010-0818: Improper Control of Generation of Code

The MPEG-4 codec in the Windows Media codecs in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 does not properly handle crafted media content with MPEG-4 video encoding, which allows remote attackers to execute arbitrary code via a file in an...

MS10-062: Vulnerability in MPEG-4 Codec Could Allow Remote Code Execution (975558)

The MPEG-4 codec, which is included with Windows Media codecs, contains a buffer overflow vulnerability that can be triggered by a specially crafted media file that uses MPEG-4 video encoding. If an attacker can trick a user on the affected system into opening a specially crafted media file or...

Intel Video Codecs 5.0 - Remote Denial of Service

Intel Video Codecs 5 Remote Denial of Service Author: Matthew Bergin Website: http://berginpentesting.com/ Email: [email protected] Date: August 27, 2010 Filename: ir5032.dll Version: 5.2562.15.55 Description: A remote user can cause denial of service conditions on remote hosts by embeddi...

Intel Video Codecs 5.0 - Remote Denial of Service

Intel Video Codecs 5.0 - Remote Denial of Service Intel Video Codecs 5 Remote Denial of Service Author: Matthew Bergin Website: http://berginpentesting.com/ Email: [email protected] Date: August 27, 2010 Filename: ir5032.dll Version: 5.2562.15.55 Description: A remote user can cause denia...

Microsoft Security Bulletin MS10-052 - Critical Vulnerability in Microsoft MPEG Layer-3 Codecs Could Allow Remote Code Execution (2115168)

Microsoft Security Bulletin MS10-052 - Critical Vulnerability in Microsoft MPEG Layer-3 Codecs Could Allow Remote Code Execution 2115168 Published: August 10, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microsoft MPEG...

Microsoft Window MPEG Layer-3 Remote Code Execution Vulnerability (2115168)

This host is missing a critical security update according to Microsoft Bulletin MS10-052. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS10-052: Vulnerability in Microsoft MPEG Layer-3 Codecs Could Allow Remote Code Execution (2115168)

The MPEG Layer-3 Audio Codec for Microsoft DirectShow l3codecx.ax, which is distributed as part of Windows Media as well as the Windows operating system, contains a buffer overflow vulnerability that can be triggered by a specially crafted MPEG Layer-3 audio stream. If an attacker can trick a use...