Gentoo Security Advisory GLSA 200811-03 (faad2)

The remote host is missing updates announced in advisory GLSA 200811-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD Ports: faad2

The remote host is missing an update to the system as announced in the referenced advisory. VID 445ed958-b0d9-11dd-a55e-00163e000016 OpenVAS Vulnerability Test $ Description: Auto generated from VID 445ed958-b0d9-11dd-a55e-00163e000016 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Gentoo Security Advisory GLSA 200811-03 (faad2)

The remote host is missing updates announced in advisory GLSA 200811-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: faad2

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD : faad2 -- heap overflow vulnerability (445ed958-b0d9-11dd-a55e-00163e000016)

CVE reports : Heap-based buffer overflow in the decodeMP4file function frontend/main.c in FAAD2 2.6.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MPEG-4 MP4 file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

GLSA-200811-03 : FAAD2: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200811-03 FAAD2: User-assisted execution of arbitrary code The ICST-ERCIS Peking University reported a heap-based buffer overflow in the decodeMP4file function in frontend/main.c. Impact : A remote attacker could entice a user to...

[ GLSA 200811-03 ] FAAD2: User-assisted execution of arbitrary code

Gentoo Linux Security Advisory GLSA 200811-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

FAAD2 library buffer overflow

Buffer overflow on MPEG-4 files parsing...

FAAD2: User-assisted execution of arbitrary code

Background FAAD2 is an open source MPEG-4 and MPEG-2 AAC decoder. Description The ICST-ERCIS Peking University reported a heap-based buffer overflow in the decodeMP4file function in frontend/main.c. Impact A remote attacker could entice a user to open a specially crafted MPEG-4 MP4 file in an...

CVE-2008-4201

Heap-based buffer overflow in the decodeMP4file function frontend/main.c in FAAD2 2.6.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MPEG-4 MP4 file...

CVE-2008-4201

Heap-based buffer overflow in the decodeMP4file function frontend/main.c in FAAD2 2.6.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MPEG-4 MP4 file...

Heap overflow

Heap-based buffer overflow in the decodeMP4file function frontend/main.c in FAAD2 2.6.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MPEG-4 MP4 file...

CVE-2008-4201

Heap-based buffer overflow in the decodeMP4file function frontend/main.c in FAAD2 2.6.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MPEG-4 MP4 file...

CVE-2008-4201

Heap-based buffer overflow in the decodeMP4file function frontend/main.c in FAAD2 2.6.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MPEG-4 MP4 file...

CVE-2008-4201

Heap-based buffer overflow in the decodeMP4file function frontend/main.c in FAAD2 2.6.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MPEG-4 MP4 file...

CVE-2008-4201

CVE-2008-4201 describes a heap-based buffer overflow in FAAD2, specifically in the decodeMP4file() function (frontend/main.c) of FAAD2 2.6.1 and earlier. The vulnerability could allow a remote attacker to crash the application or possibly execute arbitrary code by processing a crafted MPEG-4 (MP4...

CVE-2008-4201: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the decodeMP4file function frontend/main.c in FAAD2 2.6.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MPEG-4 MP4 file...

FAAD2前端decodeMP4file()函数堆溢出漏洞

BUGTRAQ ID: 31219 FAAD2是开放源码的MPEG-4和MPEG-2 AAC解码器。 FAAD2的faad2/frontend/main.c文件中的decodeMP4file函数在读取解码器库所返回缓冲区的数据时存在堆溢出漏洞，如果用户通过命令行前端处理了恶意文件的话，就可以触发这个溢出，导致拒绝服务或执行任意指令。 AudioCoding FAAD2 2.6 AudioCoding ----------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.audiocoding.com/patch/mainoverflow.dif...

faad2 -- heap overflow vulnerability

CVE reports: Heap-based buffer overflow in the decodeMP4file function frontend/main.c in FAAD2 2.6.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MPEG-4 MP4 file...