The vulnerability of the FFmpeg multimedia library, which allows a hacker to trigger a service failure

The vulnerability of the jpeg2000decodetile function libavcodec/jpeg2000dec.c in the FFmpeg multimedia library is due to buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure buffer overflow by using specially crafted JPEG 2000 format data...

PT-2016-1332

Name of the Vulnerable Software and Affected Versions OpenSSL versions 1.0.1 through 1.0.1s OpenSSL versions 1.0.2 through 1.0.2g MySQL Server versions 5.6.29 and earlier MySQL Server versions 5.7.11 and earlier Description A double free vulnerability in the dsa priv decode function in...

UBUNTU-CVE-2016-1624

Integer underflow in the ProcessCommandsInternal function in dec/decode.c in Brotli, as used in Google Chrome before 48.0.2564.109, allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via crafted data with brotli compression...

DEBIAN-CVE-2016-2329

libavcodec/tiff.c in FFmpeg before 2.8.6 does not properly validate RowsPerStrip values and YCbCr chrominance subsampling factors, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via a crafted TIFF file, related to th...

PT-2016-1274

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.8.6 Description The issue is related to the improper validation of RowsPerStrip values and YCbCr chrominance subsampling factors in the libavcodec/tiff.c file. This can be exploited by remote attackers using a crafte...

The vulnerability of the FFmpeg multimedia library, which allows a intruder to trigger a service failure or cause other effects

The vulnerability of the ffdwtdecode function libavcodec/jpeg2000dwt.c in the multimedia library FFmpeg exists due to the lack of checks for the number of decomposition levels before performing the discrete wavelet transformation. Exploiting this vulnerability could allow a malicious actor to cau...

ALPINE-CVE-2016-2213

The jpeg2000decodetile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 allows remote attackers to cause a denial of service out-of-bounds array read access via crafted JPEG 2000 data...

UBUNTU-CVE-2016-2213

The jpeg2000decodetile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 allows remote attackers to cause a denial of service out-of-bounds array read access via crafted JPEG 2000 data...

PT-2016-1254

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.8.6 Description The issue is caused by a buffer overflow in the jpeg2000 decode tile function of the FFmpeg library. This can be exploited by a remote attacker using specially crafted JPEG 2000 data, potentially...

PT-2016-3986

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.x through 2.0.0 Description The issue is related to the s7comm decode ud cpu szl subfunc function in the S7COMM dissector, which does not validate the list count in an SZL response. This allows remote attackers to cause ...

Adobe Flash LoadVars decode Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

PT-2015-3158

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.8.4 Description The issue arises from the ff dwt decode function in libavcodec/jpeg2000dwt.c not validating the number of decomposition levels before proceeding with Discrete Wavelet Transform decoding. This allows...

The vulnerability of the FFmpeg multimedia library, which allows a hacker to trigger a service failure

The vulnerability in the decodeuncompressed function in the libavcodec/faxcompr.c multimedia library of FFmpeg exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by using specially crafted CCITT FAX data...

PT-2016-3469

Name of the Vulnerable Software and Affected Versions dhcpcd versions 3.x Description The issue is related to the decode search function in dhcp.c, which allows remote DHCP servers to cause a denial of service through an out-of-bounds read via a crafted response. Recommendations For dhcpcd versio...

PT-2016-3470

Name of the Vulnerable Software and Affected Versions dhcpcd versions 3.x Description The issue is related to the decode search function in dhcp.c, which does not properly free allocated memory. This allows remote DHCP servers to cause a denial of service via a crafted response. Recommendations F...

PT-2015-7774

Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.17.1 Description The issue is related to an array index error in the smal decode segment function, which can be exploited by context-dependent attackers to cause memory errors and potentially execute arbitrary code...

PT-2015-7773

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.6.5 FFmpeg versions 2.7.x prior to 2.7.3 FFmpeg versions 2.8.x through 2.8.2 Description The issue is related to the smka decode frame function in libavcodec/smacker.c, which does not verify that the data size is...

Sam Spade 1.14 - Decode URL Buffer Overflow Crash PoC

Exploit for windows platform in category dos / poc !/usr/bin/env python Exploit Title : Sam Spade 1.14 Decode URL Buffer Overflow Crash PoC Discovery by : Vivek Mahajan - c3p70r Discovery Date : 19/11/2015 Vendor Homepage : http://samspade.org Software Link :...

Sam Spade 1.14 - Decode URL Buffer Overflow Crash (PoC)

Sam Spade 1.14 - Decode URL Buffer Overflow Crash PoC !/usr/bin/env python Exploit Title : Sam Spade 1.14 Decode URL Buffer Overflow Crash PoC Discovery by : Vivek Mahajan - c3p70r Discovery Date : 19/11/2015 Vendor Homepage : http://samspade.org Software Link :...

Sam Spade 1.14 - Decode URL Buffer Overflow Crash (PoC)

!/usr/bin/env python Exploit Title : Sam Spade 1.14 Decode URL Buffer Overflow Crash PoC Discovery by : Vivek Mahajan - c3p70r Discovery Date : 19/11/2015 Vendor Homepage : http://samspade.org Software Link : http://www.majorgeeks.com/files/details/samspade.html Tested Version : 1.14 Vulnerabilit...