new packages: gom

An update is available for gom. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

gom bug fix and enhancement update

An update is available for gom. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

PackageKit, accountsservice, adwaita, appstream, at, atk, baobab, bolt, brasero, cairo, cheese, clutter, compat, control, dconf, devhelp, ekiga, empathy, eog, evince, evolution, file, flatpak, folks, fontconfig, freetype, fribidi, fwupd, fwupdate, gcr, gdk, gdm, gedit, geoclue2, geocode, gjs, glade, glib, glib2, glibmm24, gnome, gnote, gobject, gom, google, grilo, gsettings, gspell, gssdp, gstreamer1, gtk, gtk3, gtksourceview3, gucharmap, gupnp, gvfs, harfbuzz, json, libappstream, libchamplain, libcroco, libgdata, libgee, libgepub, libgexiv2, libgnomekbd, libgovirt, libgtop2, libgweather, libgxps, libical, libmediaart, libosinfo, libpeas, librsvg2, libsecret, libsoup, libwayland, libwnck3, mozjs52, mutter, nautilus, openchange, osinfo, pango, poppler, python2, rest, rhythmbox, seahorse, shotwell, sushi, totem, upower, vala, valadoc, vino, vte, vte291, wayland, webkitgtk4, xdg, yelp, zenity security update

CentOS Errata and Security Advisory CESA-2018:3140 An update is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Memory corruption

GOM Player 2.3.10.5266 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted fpx file...

CVE-2017-5881

GOM Player 2.3.10.5266 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted fpx file...

CVE-2017-5881

GOM Player 2.3.10.5266 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted fpx file...

CVE-2017-5881

CVE-2017-5881 affects GOM Player 2.3.10.5266. Multiple sources describe a vulnerability where a crafted ".fpx" file can cause memory corruption leading to a denial of service (and potentially other impacts). Public entries consistently cite memory corruption as the underlying issue and mention a ...

CVE-2017-5881

GOM Player 2.3.10.5266 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted fpx file...

CVE-2017-5881: Improper Restriction of Operations within the Bounds of a Memory Buffer

GOM Player 2.3.10.5266 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted fpx file...

GOM Player 2.3.10.5266 - .fpx Denial of Service Exploit

Exploit for windows platform in category dos / poc Exploit Title: GOM Player 2.3.10.5266 - Remote heap corruption .fpx Date: 2017-02-15 Exploit Author: Peter Baris Exploit link: http://www.saptech-erp.com.au/resources/PoC.zip Software Link: http://player.gomlab.com/download.gom?language=eng CVE:...

GOM Player 2.3.10.5266 - .fpx Denial of Service

GOM Player 2.3.10.5266 - .fpx Denial of Service Exploit Title: GOM Player 2.3.10.5266 - Remote heap corruption .fpx Date: 2017-02-15 Exploit Author: Peter Baris Exploit link: http://www.saptech-erp.com.au/resources/PoC.zip Software Link: http://player.gomlab.com/download.gom?language=eng CVE:...

GOM Player 2.3.10.5266 - '.fpx' Denial of Service

Exploit Title: GOM Player 2.3.10.5266 - Remote heap corruption .fpx Date: 2017-02-15 Exploit Author: Peter Baris Exploit link: http://www.saptech-erp.com.au/resources/PoC.zip Software Link: http://player.gomlab.com/download.gom?language=eng CVE: CVE-2017-5881 Version: 2.3.10.5266 Tested on: Windo...

GOM Audio 2.0.8 - '.gas' Crash (PoC)

Exploit Title: GOM Audio 2.0.8 Crash POC Date: 8/24/2015 Exploit Author: UnN0n Software Vendor : http://audio.gomlab.com/ Software Link: http://audio.gomlab.com/downloadlog.gom Version: 2.0.8 2015/06/17 Tested on: Windows 7 x8632 BIT Steps to Produce the Crash: 1- open 'Goma.exe'. 2- Goto...

GOM Audio 2.0.8 - .gas Crash (PoC)

GOM Audio 2.0.8 - .gas Crash PoC Exploit Title: GOM Audio 2.0.8 Crash POC Date: 8/24/2015 Exploit Author: UnN0n Software Vendor : http://audio.gomlab.com/ Software Link: http://audio.gomlab.com/downloadlog.gom Version: 2.0.8 2015/06/17 Tested on: Windows 7 x8632 BIT Steps to Produce the Crash: 1-...

GOM-Player-2.1.33.5071-ASX-File-Unicode

Exploit Title: GOM Player Crafted ASX File Unicode Stack Buffer Overflow and Arbitrary Code Execution. Version: 2.1.33.5071 Date: 30-11-2011 Author: Debasish Mandal Peter Van Eeckhoutte corelanc0d3r rawinput" Press Enter to generate the crafted ASX..." size = 2046 Shellcode WinExec "Calc.exe"...

GOM Media Player Denial of Service Vulnerability (Sep 2014) - Windows

GOM Media Player is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-3899

Gretech GOM Player 2.2.51.5149 and earlier allows remote attackers to cause a denial of service launch outage via a crafted image file...

Code injection

Gretech GOM Player 2.2.51.5149 and earlier allows remote attackers to cause a denial of service launch outage via a crafted image file...

CVE-2014-3899

Gretech GOM Player 2.2.51.5149 and earlier allows remote attackers to cause a denial of service launch outage via a crafted image file...

CVE-2014-3899

GOM Media Player (Gretech) is affected by CVE-2014-3899. A DoS can be triggered by processing a specially crafted image file, affecting versions up to 2.2.51.5149 and earlier. The root cause is related to image file handling within the player, enabling remote-induced service disruption without ve...