Directory traversal

An issue was discovered in zzcms 8.3. It allows remote attackers to delete arbitrary files via directory traversal sequences in the flv parameter. This can be leveraged for database access by deleting install.lock...

FFmpeg 'flv_write_packet' function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'flvwritepacket' function in the libavformat/flvenc.c file in FFmpeg 4.0.2 and earlier versions, which stems from the 'flvwritepacket ' function does...

DEBIAN-CVE-2018-15822

The flvwritepacket function in libavformat/flvenc.c in FFmpeg through 2.8 does not check for an empty audio packet, leading to an assertion failure...

UBUNTU-CVE-2018-15822

The flvwritepacket function in libavformat/flvenc.c in FFmpeg through 2.8 does not check for an empty audio packet, leading to an assertion failure...

Design/Logic Flaw

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, a...

CVE-2016-10420

CVE-2016-10420 affects Android devices with Qualcomm Snapdragon/mobile platforms listed (e.g., MDM9206/9607/9650 and SD family up to SDX20). The issue arises while playing a .flv clip that lacks an inbuilt seek table, where a dynamic index table access goes out of bounds, causing a crash (availab...

CVE-2016-10420

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, a...

CVE-2017-10728

Winamp 5.666 Build 3516x86 might allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Error Code 0xe06d7363 starting at wow64!Wow64NotifyDebugger+0x000000000000001d."...

CVE-2017-10728

Winamp 5.666 Build 3516x86 might allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Error Code 0xe06d7363 starting at wow64!Wow64NotifyDebugger+0x000000000000001d."...

Design/Logic Flaw

Winamp 5.666 Build 3516x86 might allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Error Code 0xe06d7363 starting at wow64!Wow64NotifyDebugger+0x000000000000001d."...

Design/Logic Flaw

Winamp 5.666 Build 3516x86 might allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Data from Faulting Address may be used as a return value starting at f263!GetWinamp5SystemComponent+0x0000000000001951."...

Code injection

Winamp 5.666 Build 3516x86 allows attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Data from Faulting Address controls Code Flow starting at inflv!winampGetInModule2+0x00000000000009a8."...

CVE-2017-10725

Winamp 5.666 Build 3516x86 allows attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Data from Faulting Address controls Code Flow starting at inflv!winampGetInModule2+0x00000000000009a8."...

CVE-2017-10726

Winamp 5.666 Build 3516x86 might allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Data from Faulting Address may be used as a return value starting at f263!GetWinamp5SystemComponent+0x0000000000001951."...

CVE-2017-10726

Winamp 5.666 Build 3516x86 might allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Data from Faulting Address may be used as a return value starting at f263!GetWinamp5SystemComponent+0x0000000000001951."...

CVE-2017-10727

Winamp 5.666 Build 3516 (x86) is affected by CVE-2017-10727 due to a crafted .flv file that can lead to arbitrary code execution or a denial of service. The root cause is described as Data from Faulting Address controls Branch Selection starting at in_mp3!DeleteAudioDecoder+0x000000000000762f, in...

CVE-2017-10725

Winamp 5.666 Build 3516x86 allows attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Data from Faulting Address controls Code Flow starting at inflv!winampGetInModule2+0x00000000000009a8."...

CVE-2017-10727

Winamp 5.666 Build 3516x86 might allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Data from Faulting Address controls Branch Selection starting at inmp3!DeleteAudioDecoder+0x000000000000762f."...

CVE-2017-10728

Winamp 5.666 Build 3516 (x86) is vulnerable to arbitrary code execution or denial of service via a crafted .flv file, related to Error Code 0xe06d7363 starting at wow64!Wow64NotifyDebugger+0x000000000000001d. No details on root cause beyond this description are provided in the connected documents...

CVE-2017-10725

The CVE-2017-10725 entry concerns Winamp 5.666 Build 3516 (x86). The connected documents provide concrete details: processing a crafted .flv file can lead to arbitrary code execution or a denial of service due to a faulting address control flow in in_flv!winampGetInModule2+0x… (data from faulting...