Sam Spade 1.14 - Decode URL Buffer Overflow Crash (PoC)

Sam Spade 1.14 - Decode URL Buffer Overflow Crash PoC !/usr/bin/env python Exploit Title : Sam Spade 1.14 Decode URL Buffer Overflow Crash PoC Discovery by : Vivek Mahajan - c3p70r Discovery Date : 19/11/2015 Vendor Homepage : http://samspade.org Software Link :...

Sam Spade 1.14 - Decode URL Buffer Overflow Crash (PoC)

!/usr/bin/env python Exploit Title : Sam Spade 1.14 Decode URL Buffer Overflow Crash PoC Discovery by : Vivek Mahajan - c3p70r Discovery Date : 19/11/2015 Vendor Homepage : http://samspade.org Software Link : http://www.majorgeeks.com/files/details/samspade.html Tested Version : 1.14 Vulnerabilit...

FFmpeg 'ljpeg_decode_yuv_scan' function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'ljpegdecodeyuvscan' function in the libavcodec/mjpegdec.c file in versions of FFmpeg prior to 2.8.2. As the program fails to perform length and width...

FFmpeg 'decode_uncompressed' function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'decodeuncompressed' function in the libavcodec/faxcompr.c file in versions of FFmpeg prior to 2.8.2. As the program fails to validate the operation o...

[SECURITY] Fedora 21 Update: libvdpau-1.1.1-2.fc21

VDPAU is the Video Decode and Presentation API for UNIX. It provides an interface to video decode acceleration and presentation hardware present in modern GPUs...

UBUNTU-CVE-2015-5479

The ffh263decodemba function in libavcodec/ituh263dec.c in Libav before 11.5 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a file with crafted dimensions...

Oracle: Security Advisory (ELSA-2015-3054)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 22 Update: libvdpau-1.1.1-1.fc22

VDPAU is the Video Decode and Presentation API for UNIX. It provides an interface to video decode acceleration and presentation hardware present in modern GPUs...

libvdpau Directory Traversal Vulnerability

libvdpau is a Unix-like system video decoding and presentation API interface VDAPU Video Decode and Presentation API for Unix in the open source library files. A directory traversal vulnerability exists in versions of libvdpau prior to 1.1.1, which allows local users to gain privileges via the...

FFmpeg ff_rv34_decode_init_thread_copy denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'ffrv34decodeinitthreadcopy' function in the libavcodec/rv34.c file in versions of FFmpeg prior to 2.7.2, which is caused by the program failing to...

FFmpeg Denial of Service Vulnerability (CNVD-2015-05845)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'decodeihdrchunk' function in the libavcodec/pngdec.c file in versions of FFmpeg prior to 2.7.2, which can be exploited by remote attackers to cause a...

[SECURITY] Fedora 23 Update: libvdpau-1.1.1-1.fc23

VDPAU is the Video Decode and Presentation API for UNIX. It provides an interface to video decode acceleration and presentation hardware present in modern GPUs...

ESA-2015-081: RSA BSAFE® Micro Edition Suite, Crypto-C Micro Edition, Crypto-J, SSL-J and SSL-C Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-081: RSA BSAFE® Micro Edition Suite, Crypto-C Micro Edition, Crypto-J, SSL-J and SSL-C Multiple Vulnerabilities EMC Identifier: ESA-2015-081 CVE Identifier: CVE-2015-0533, CVE-2015-0534, CVE-2015-0535, CVE-2015-0536, CVE-2015-0537 Severity...

EMC RSA BSAFE multiple security vulnerabilities

Integer overflow in base64 decode, multiple crypto vulnerabilities...

The vulnerability of the OpenSSL library, which allows a hacker to trigger a service failure

The vulnerability of the PKCS7dataDecode function in the OpenSSL library is related to pointer swapping errors. Exploiting this vulnerability could allow a malicious actor to cause service failures when using the PKCS7 specification...

[SECURITY] Fedora 22 Update: flac-1.3.1-5.fc22

FLAC stands for Free Lossless Audio Codec. Grossly oversimplified, FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, flac, a command-line program to encode and decode FLAC files, metaflac, a command-line...

OracleVM 3.3 : kernel-uek (OVMSA-2015-0104)

The remote OracleVM system is missing necessary patches to address critical security updates : - KVM: x86: SYSENTER emulation is broken Nadav Amit Orabug: 21502739 CVE-2015-0239 CVE-2015-0239 - fs: take imutex during preparebinprm for setugid executables Jann Horn Orabug: 21502254 CVE-2015-3339 -...

nss: QuickDER decoder length issue

The definitelengthdecoder function in lib/util/quickder.c in Mozilla Network Security Services NSS before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long...

ClamAV upx.c pefromupx() UPX Decode Handling Remote Denial of Service Vulnerability

ClamAV is an anti-virus application. ClamAV upx.c pefromupx handles special files with a security vulnerability that allows remote attackers to exploit the vulnerability to crash the application...

Unmediated PCI command register access in qemu

ISSUE DESCRIPTION HVM guests are currently permitted to modify the memory and I/O decode bits in the PCI command register of devices passed through to them. Unless the device is an SR-IOV virtual function, after disabling one or both of these bits subsequent accesses to the MMIO or I/O port range...