247 matches found
CVE-2017-0397
An information disclosure vulnerability in id3/ID3.cpp in libstagefright in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Androi...
Information disclosure
An information disclosure vulnerability in id3/ID3.cpp in libstagefright in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Androi...
UBUNTU-CVE-2017-0397
An information disclosure vulnerability in id3/ID3.cpp in libstagefright in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Androi...
CVE-2017-0397
An information disclosure vulnerability in id3/ID3.cpp in libstagefright in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Androi...
Updated mpg123 packages fix security vulnerability
Jerold Hoong discovered a flaw in the id3 tag processing code of libmpg123. A specially crafted mp3 input file could be used to cause a buffer over-read, resulting in a denial of service CVE-2016-1000247...
MGASA-2016-0358 Updated mpg123 packages fix security vulnerability
Jerold Hoong discovered a flaw in the id3 tag processing code of libmpg123. A specially crafted mp3 input file could be used to cause a buffer over-read, resulting in a denial of service CVE-2016-1000247...
Android Mediaserver Denial of Service Vulnerability (CNVD-2016-09552)
Android is an open source operating system based on Linux. A security vulnerability in the id3/ID3.cpp file in libstagefright in Android's Mediaserver allows remote attackers to exploit the vulnerability to build malicious applications that can crash the application...
CVE-2016-3920
id3/ID3.cpp in libstagefright in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows remote attackers to cause a denial of service device hang or reboot via a crafted file, aka internal bug 30744884...
UBUNTU-CVE-2016-3920
id3/ID3.cpp in libstagefright in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows remote attackers to cause a denial of service device hang or reboot via a crafted file, aka internal bug 30744884...
Patched Android Libutils Vulnerability Harkens Back to Stagefright
This week’s Android Security Bulletin patched a calamity of vulnerabilities that threatened almost every device in circulation and illustrated the fragility of the Android ecosystem. The bulletin addressed more than 50 vulnerabilities, including nine rated critical by Google because of the...
Zortam Mp3 Media Studio 20.15 - Overflow (PoC) (SEH)
Zortam Mp3 Media Studio 20.15 - Overflow PoC SEH -- coding: utf-8 -- Exploit Title : Zortam Mp3 Media Studio 20.15 - SEH overflow DOS Date: 2016-03-12 Author: INSECT.B Facebook : https://www.facebook.com/B.INSECT00 GitHub : binsect00 Blog : http://binsect00.tistory.com Vendor Homepage :...
Zortam Mp3 Media Studio 20.15 - SEH Overflow Denial of Service
Exploit for windows platform in category dos / poc -- coding: utf-8 -- Exploit Title : Zortam Mp3 Media Studio 20.15 - SEH overflow DOS Date: 2016-03-12 Author: INSECT.B Facebook : https://www.facebook.com/B.INSECT00 GitHub : binsect00 Blog : http://binsect00.tistory.com Vendor Homepage :...
Apple QuickTime ID3 Tag Heap Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of I...
Audacious 3.7 - ID3 Local Crash PoC
Exploit for windows platform in category dos / poc Exploit Title: Audacious 3.7 ID3 Local Crash PoC Date: 11-20-2015 Exploit Author: Antonio Z. Vendor Homepage: http://audacious-media-player.org/ Software Link: http://audacious-media-player.org/download |...
Audacious 3.7 - ID3 Local Crash (PoC)
Audacious 3.7 - ID3 Local Crash PoC Exploit Title: Audacious 3.7 ID3 Local Crash PoC Date: 11-20-2015 Exploit Author: Antonio Z. Vendor Homepage: http://audacious-media-player.org/ Software Link: http://audacious-media-player.org/download |...
Audacious 3.7 - ID3 Local Crash (PoC)
Exploit Title: Audacious 3.7 ID3 Local Crash PoC Date: 11-20-2015 Exploit Author: Antonio Z. Vendor Homepage: http://audacious-media-player.org/ Software Link: http://audacious-media-player.org/download | http://distfiles.audacious-media-player.org/audacious-3.7-win32.zip Version: 3.7 Tested on:...
CVE-2015-3862
mediaserver in Android before 5.1.1 LMY48T allows attackers to cause a denial of service process crash via unspecified vectors, aka internal bug 22954006...
CVE-2015-3876
libstagefright in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file...
Adobe Flash - Overflow in ID3 Tag Parsing
Source: https://code.google.com/p/google-security-research/issues/detail?id=443&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id If an mp3 file contains compressed ID3 data that is larger than 0x2aaaaaaa bytes, an integer overflow will occur in allocating the buffer to conta...
Adobe Flash - Overflow in ID3 Tag Parsing
Adobe Flash - Overflow in ID3 Tag Parsing Source: https://code.google.com/p/google-security-research/issues/detail?id=443&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id If an mp3 file contains compressed ID3 data that is larger than 0x2aaaaaaa bytes, an integer overflow wi...