6728 matches found
CVE-2018-13303
In FFmpeg 4.0.1, a missing check for failure of a call to initgetbits8 in the avprivac3parseheader function in libavcodec/ac3parser.c may trigger a NULL pointer dereference while converting a crafted AVI file to MPEG4, leading to a denial of service...
CVE-2018-13301
In FFmpeg 4.0.1, due to a missing check of a profile value before setting it, the ffmpeg4decodepictureheader function in libavcodec/mpeg4videodec.c may trigger a NULL pointer dereference while converting a crafted AVI file to MPEG4, leading to a denial of service...
CVE-2018-13301
In FFmpeg 4.0.1, due to a missing check of a profile value before setting it, the ffmpeg4decodepictureheader function in libavcodec/mpeg4videodec.c may trigger a NULL pointer dereference while converting a crafted AVI file to MPEG4, leading to a denial of service...
CVE-2018-13301: NULL Pointer Dereference
In FFmpeg 4.0.1, due to a missing check of a profile value before setting it, the ffmpeg4decodepictureheader function in libavcodec/mpeg4videodec.c may trigger a NULL pointer dereference while converting a crafted AVI file to MPEG4, leading to a denial of service...
CVE-2018-1355
CVE-2018-1355 is an open-redirect vulnerability in Fortinet FortiManager/FortiAnalyzer (affected: FortiManager 6.0.0 and earlier; FortiAnalyzer 6.0.0 and earlier) exploited via FortiView HTML-table-to-PDF conversion. It allows an attacker to inject script URLs into a generated PDF, potentially vi...
CVE-2018-1355
An open redirect vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versions allows attacker to inject script code during converting a HTML table to a PDF document under the FortiView feature. An attacker may be able to social engineer an...
PT-2018-2293
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 4.0.1 Description The issue is related to the improper handling of frame types, other than EAC3 FRAME TYPE INDEPENDENT, that have multiple independent substreams in the handle eac3 function. This may trigger an...
CVE-2018-1355: URL Redirection to Untrusted Site
An open redirect vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versions allows attacker to inject script code during converting a HTML table to a PDF document under the FortiView feature. An attacker may be able to social engineer an...
Adobe Acrobat Pro DC ImageConversion EMF GIF Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...
OpenRedirect in Malicious Generated PDF Document on FortiAnalyzer and FortiManager
An open redirect vulnerability exists in FortiAnalyzer and FortiManager when a user of the GUI is converting an HTML table to a PDF document via the FortiView feature, due to lack of user input sanitization...
Security Bulletin: Weakness in generated service credentials affects multiple Watson Developer Cloud services (CVE-2016-0391)
Summary A weakness in generated service credentials that affects multiple Watson Developer Cloud offered through IBM Bluemix has been identified and fixed. Replacement of previously generated credentials is recommended. Vulnerability Details CVEID: CVE-2016-0391 DESCRIPTION: Multiple Watson...
CVE-2018-12460
libavcodec in FFmpeg 4.0 may trigger a NULL pointer dereference if the studio profile is incorrectly detected while converting a crafted AVI file to MPEG4, leading to a denial of service, related to idctdsp.c and mpegvideo.c...
Security Bulletin: IBM WebSphere MQ Channelのデータ変換が拒否されてしまう (CVE-2016-3013)
Summary メッセージチャネルエージェントMCAがキューから大きなメッセージを取得してデータ変換をすると、バッファオーバーフローが起きてチャネルが異常終了する可能性があります。 最新の情報については下記の文書（英語）をご参照ください。 Security Bulletin: IBM WebSphere MQ Channel data conversion denial of service CVE-2016-3013 http://www.ibm.com/support/docview.wss?uid=swg21998661 Vulnerability Details CVEID:...
Security Bulletin: IBM MQ Channel data conversion denial of service (CVE-2016-3013)
Summary When an Message Channel Agent removes a large message from a queue and applies data conversion to the message, the result could overflow the allocated buffer and cause the channel to end abnormally. Vulnerability Details CVEID: CVE-2016-3013 DESCRIPTION: IBM MQ could allow an authenticate...
Decamelize Denial of Service Vulnerability
Decamelize is a tool that converts camelized strings to lowercase using custom separators. A security vulnerability exists in Decamelize. An attacker could exploit this vulnerability to cause a denial of service...
PT-2018-11189
Name of the Vulnerable Software and Affected Versions FFmpeg versions 2.8 through 4.0 Description The issue is related to an improper integer type in the mpeg4 encode gop header function, which may cause an assertion violation when converting a crafted AVI file to MPEG4. This can lead to a denial...
CVE-2018-12459: Improper Input Validation
An inconsistent bits-per-sample value in the ffmpeg4decodepictureheader function in libavcodec/mpeg4videodec.c in FFmpeg 4.0 may trigger an assertion violation while converting a crafted AVI file to MPEG4, leading to a denial of service...
PT-2018-4004
Name of the Vulnerable Software and Affected Versions FFmpeg version 4.0 Description The issue is related to an inconsistent bits-per-sample value in the ff mpeg4 decode picture header function, which may trigger an assertion violation when converting a crafted AVI file to MPEG4. This can lead to...
