EUVD-2018-8995

Malware in sbrugna...

EUVD-2018-8996

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2018-17236

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The function MP4Free in mp4property.cpp in libmp4v2 2.1.0 internally calls free on a invalid pointer, raising a SIGABRT signal. CVE-2018-17236 Note that Nessus...

Heap-based Buffer Overflow

libmp4v2.so is vulnerable to Heap-based Buffer Overflow. The vulnerability is due to not validating the input parameter newSize of function Resize in the file mp4array.h . This can lead to buffer overflow while allocating memory to MP4Array array...

Denial Of Service (DoS)

libmp4v2.so is vulnerable to Denial of Service DoS. The vulnerability exists in via MP4File::ReadString at mp4fileio.cpp because the memory allocation is not properly implemented which allows an attacker to cause memory leaks resulting in an application crash...

Denial Of Service (DoS)

libmp4v2.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to theMP4File::ReadBytes function which allows an attacker to cause an application crash...

Denial Of Service (DoS)

libmp4v2.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to improper memory management in MP4SdpAtom::Read of atomsdp.cpp, which allows an attacker to crash the application...

Denial Of Service (DoS)

libmp4v2.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to improper memory management in the MP4StringProperty of mp4property.cpp, which allows an attacker to crash the application...

Denial Of Service (DoS)

libmp4v2.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to improper memory management in the MP4StringProperty of mp4property.cpp, which allows an attacker to crash the application...

Out-of-bounds Read

libmp4v2.so is vulnerable to Out-of-bounds Reads. The vulnerability exists in mp4track.cpp due to mishandling of compatibleBrand while processing a crafted mp4 file which allows an attacker to cause a heap based buffer over-reads resulting in an application crash...

Heap-based Buffer Overflow

libmp4v2.so is vulnerable to Heap-based Buffer Overflow. The vulnerability exists in MP4GetVideoProfileLevel function of mp4.cpp which allows an attacker to cause a buffer overflow that could result in an application crash...

Mageia: Security Advisory (MGASA-2019-0048)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2020-0062 Updated libmp4v2 packages fix security vulnerabilities

Updated libmp4v2 packages fix security vulnerabilities: The libmp4v2 library through version 2.1.0 is vulnerable to an integer underflow when parsing an MP4Atom in mp4atom.cpp. An attacker could exploit this to cause a denial of service via crafted MP4 file CVE-2018-14325. The libmp4v2 library...

Updated libmp4v2 packages fix security vulnerabilities

Updated libmp4v2 packages fix security vulnerabilities: The libmp4v2 library through version 2.1.0 is vulnerable to an integer underflow when parsing an MP4Atom in mp4atom.cpp. An attacker could exploit this to cause a denial of service via crafted MP4 file CVE-2018-14325. The libmp4v2 library...

Fedora Update for libmp4v2 FEDORA-2019-d53d4a79ac

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora Update for libmp4v2 FEDORA-2019-6469ad8129

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora Update for libmp4v2 FEDORA-2019-1030f4816a

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 29 Update: libmp4v2-2.1.0-0.19.trunkREV507.fc29

The libmp4v2 library provides an abstraction layer for working with files using the mp4 container format. This library is developed by mpeg4ip project and is an exact copy of the library distributed in the mpeg4ip package...

[SECURITY] Fedora 30 Update: libmp4v2-2.1.0-0.19.trunkREV507.fc30

The libmp4v2 library provides an abstraction layer for working with files using the mp4 container format. This library is developed by mpeg4ip project and is an exact copy of the library distributed in the mpeg4ip package...

Fedora 29 : libmp4v2 (2019-6469ad8129)

Fix crash made by the new patches ---- Fix https://nvd.nist.gov/vuln/detail/CVE-2018-14446 https://nvd.nist.gov/vuln/detail/CVE-2018-14403 https://nvd.nist.gov/vuln/detail/CVE-2018-14379 https://nvd.nist.gov/vuln/detail/CVE-2018-14326 https://nvd.nist.gov/vuln/detail/CVE-2018-14325...