CVE-2015-3417

Use-after-free vulnerability in the ffh264freetables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted H.264 data in an MP4 file, as demonstrated by an HTML VIDEO element that references...

Design/Logic Flaw

Use-after-free vulnerability in the ffh264freetables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted H.264 data in an MP4 file, as demonstrated by an HTML VIDEO element that references...

CVE-2015-3417

CVE-2015-3417 describes a use-after-free in FFmpeg's libavcodec/h264.c (ff_h264_free_tables) that can be triggered by crafted H.264 data in an MP4, potentially causing a denial of service. The vulnerability affects FFmpeg/libav prior to a fixed version referenced in multiple advisories. Publicly ...

CVE-2015-3417

Use-after-free vulnerability in the ffh264freetables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted H.264 data in an MP4 file, as demonstrated by an HTML VIDEO element that references...

CVE-2015-3417

Use-after-free vulnerability in the ffh264freetables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted H.264 data in an MP4 file, as demonstrated by an HTML VIDEO element that references...

PT-2015-4882 · Mozilla +4 · Firefox +6

Name of the Vulnerable Software and Affected Versions: GStreamer versions prior to 1.4.5 Mozilla Firefox versions prior to 38.0 Firefox ESR 31.x versions prior to 31.7 Thunderbird versions prior to 31.7 Description: The issue allows remote attackers to cause a denial of service buffer over-read a...

CVE-2015-0688

Cisco IOS XE 3.10.2S on an ASR 1000 device with an Embedded Services Processor ESP module, when NAT is enabled, allows remote attackers to cause a denial of service module crash via malformed H.323 packets, aka Bug ID CSCup21070...

Code injection

Cisco IOS XE 3.10.2S on an ASR 1000 device with an Embedded Services Processor ESP module, when NAT is enabled, allows remote attackers to cause a denial of service module crash via malformed H.323 packets, aka Bug ID CSCup21070...

CVE-2015-0688

CVE-2015-0688 affects Cisco IOS XE 3.10.2S on ASR 1000 with an Embedded Services Processor (ESP). The issue arises when NAT is enabled and malformed H.323 packets are processed, allowing an unauthenticated, remote attacker to cause a denial of service by crashing the ESP module. Exploitation is r...

CVE-2015-0688

Cisco IOS XE 3.10.2S on an ASR 1000 device with an Embedded Services Processor ESP module, when NAT is enabled, allows remote attackers to cause a denial of service module crash via malformed H.323 packets, aka Bug ID CSCup21070...

Cisco ASR1000 Series Routers ESP Module Denial of Service Vulnerability

A vulnerability in the Embedded Services Processor ESP module of Cisco ASR 1000 Series Routers running Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to improper handling of malformed H.323 packets by an...

Internet Bug Bounty: Heap overflow in H. Spencer’s regex library on 32 bit systems

The IBB's programs provide a great incentive for me to find vulnerabilities in open source software. With this one I set out to find a vulnerability in PHP and discovered that the vulnerability that I found exists in a wider constellation of applications, including BSD libc's. IBB's Alex Rice's...

Google Chrome PDFium Denial of Service Vulnerability

Google Chrome is the United States Google Google company developed a Web browser. PDFium is one of the open source PDF rendering engine. Google Chrome 40.0.2214.85 and previous versions of PDFium used in the fpdfapi/fpdffont/fontint.h file has a denial of service vulnerability. A remote attacker...

Global 40W webcam security risks-vulnerability warning-the black bar safety net

H. 2 6 4 DVR, don't know Chinese how called, the camera, a large number of deployments all over the world. Steady 40w. IP: http://189.180.16.235/ factory reset, the account password: admin admin IP: http://113.182.179.91/ IP: http://187.148.169.94/ 1 2 next...

Gecko Media Plugin sandbox escape — Mozilla

Security researcher Nils discovered a mechanism to break out of the Gecko Media Plugin GMP sandbox on Windows systems. The GMP sandbox is currently only used to host h.264 video playback using the OpenH264 plugin but is being developed to host other other media plugins. This bug would allow an...

From the source perspective on the ntpd stack buffer overflow vulnerability(CVE-2 0 1 4-9 2 9 5)analysis-vulnerability warning-the black bar safety net

Recently, the ntp's official website released a Update Patch: A total of 6 vulnerabilities 4 CVE number, both of Google Security Team found and submitted. Wherein the CVE-2 0 1 4-9 2 9 5 includes a 3 stack overflow: a This article from the source code perspective, these three stack overflow,...

ffmpeg -- use-after-free

NVD reports: Use-after-free vulnerability in the ffh264freetables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted H.264 data in an MP4 file, as demonstrated by an HTML VIDEO element tha...

Cisco OpenH264 Heap Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on applications using vulnerable versions of Cisco OpenH264. The specific flaw exists within the decoder logic. By providing malformed H.264 data to the decoder, an attacker can overwrite a heap buffer. This could result in the...

Cisco OpenH264 Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on applications using vulnerable versions of Cisco OpenH264. The specific flaw exists within the decoder logic. By providing malformed H.264 data to the decoder, an attacker can force a dangling pointer to be referenced after it...

IPUX CS7522/CS2330/CS2030 IP Camera Stack Buffer Overflow

IPUX CS7522/CS2330/CS2030 IP Camera UltraHVCamX.ocx ActiveX Stack Buffer Overflow Vendor: Big Good Holdings Limited | Fitivision Technology Inc. Product web page: http://www.ipux.net | http://www.fitivision.com Affected version: PT Type ICS2330 firmware: ICS2330 1.1.0-29 20140120 r4296 Cube Type...