Samsung Galaxy S6 - android.media.process Face Recognition Memory Corruption

Source: https://code.google.com/p/google-security-research/issues/detail?id=499 The attached files cause memory corruption when they are scanned by the face recognition library in android.media.process. From faces-art.bmp F/libc 11305: Fatal signal 11 SIGSEGV, code 1, fault addr 0x0 in tid 11555...

Samsung Galaxy S6 - android.media.process Face Recognition Memory Corruption

Samsung Galaxy S6 - android.media.process Face Recognition Memory Corruption Source: https://code.google.com/p/google-security-research/issues/detail?id=499 The attached files cause memory corruption when they are scanned by the face recognition library in android.media.process. From faces-art.bm...

CVE-2015-6762

The CSSFontFaceSrcValue::fetch function in core/css/CSSFontFaceSrcValue.cpp in the Cascading Style Sheets CSS implementation in Blink, as used in Google Chrome before 46.0.2490.71, does not use the CORS cross-origin request algorithm when a font's URL appears to be a same-origin URL, which allows...

UBUNTU-CVE-2015-6762

The CSSFontFaceSrcValue::fetch function in core/css/CSSFontFaceSrcValue.cpp in the Cascading Style Sheets CSS implementation in Blink, as used in Google Chrome before 46.0.2490.71, does not use the CORS cross-origin request algorithm when a font's URL appears to be a same-origin URL, which allows...

thenorthface.co.uk XSS vulnerability

Vulnerable URL: http://www.thenorthface.co.uk/tnf-uk-en/catalogsearch/result/?q=%27%29%2Balert%28%27XSSPOSED&store=tnf-uk-en&fromstore=tnf-at-de Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 17:53 GMT Vulnerability type:| XSS Vulnerability...

Face Gallery by Apptha [com_facegallery] version 1.0

Face Gallery by Apptha comfacegallery, version 1.0 exploit: Other...

FFmpeg and Libav 'libavcodec/xface.h' Denial of Service Vulnerability

FFmpeg is a free program that performs recording, transferring and streaming of audio and video in various formats. FFmpeg versions prior to 2.5.2 libavcodec/xface.h establishes certain numeric and word array dimensions that do not conform to the required mathematical relationships, which can be...

DEBIAN-CVE-2014-9602

libavcodec/xface.h in FFmpeg before 2.5.2 establishes certain digits and words array dimensions that do not satisfy a required mathematical relationship, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted...

CVE-2014-9602

libavcodec/xface.h in FFmpeg before 2.5.2 establishes certain digits and words array dimensions that do not satisfy a required mathematical relationship, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted...

Out-of-bounds

libavcodec/xface.h in FFmpeg before 2.5.2 establishes certain digits and words array dimensions that do not satisfy a required mathematical relationship, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted...

CVE-2014-9602

libavcodec/xface.h in FFmpeg before 2.5.2 establishes certain digits and words array dimensions that do not satisfy a required mathematical relationship, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted...

CVE-2014-9602

libavcodec/xface.h in FFmpeg before 2.5.2 establishes certain digits and words array dimensions that do not satisfy a required mathematical relationship, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted...

PT-2015-4306

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.5.2 Description The issue allows remote attackers to cause a denial of service or possibly have other impacts via crafted X-Face image data due to a mathematical relationship not being satisfied in certain array...

CVE-2014-9602: Undefined Security Weakness

libavcodec/xface.h in FFmpeg before 2.5.2 establishes certain digits and words array dimensions that do not satisfy a required mathematical relationship, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted...

PT-2015-4330

Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.5.4 Description The issue is related to the tt face load hdmx function in truetype/ttpload.c, which does not establish a minimum record size. This allows remote attackers to cause a denial of service out-of-bounds...

PT-2015-4331

Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.5.4 Description The issue is related to the tt face load kern function in sfnt/ttkern.c, which enforces an incorrect minimum table length. This allows remote attackers to cause a denial of service out-of-bounds rea...

CVE-2014-7443

The CVE-2014-7443 entry affects the Android app Face Fun Photo Collage Maker 2 (package com.kauf.facefunphotocollagemaker2) version 1.3.0. The vulnerability arises because the app does not verify X.509 SSL/TLS certificates when connecting to servers, enabling a man-in-the-middle attacker to spoof...

PT-2014-7999

Name of the Vulnerable Software and Affected Versions The Face Fun Photo Collage Maker 2 version 1.3.0 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates fr...

CVE-2014-7443: Undefined Security Weakness

The Face Fun Photo Collage Maker 2 aka com.kauf.facefunphotocollagemaker2 application 1.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Joomla! Component com_facegallery 1.0 - Multiple Vulnerabilities

Joomla! Component comfacegallery 1.0 - Multiple Vulnerabilities Exploit Title : Joomla Face Gallery 1.0 Multiple Vulnerabilities Exploit Author : Claudio Viviani Vendor Homepage : https://www.apptha.com Software Link : https://www.apptha.com/downloadable/download/sample/sampleid/150 Dork Google:...