2108 matches found
CVE-2015-3831
CVE-2015-3831 affects Android mediaserver, specifically the BpMediaHTTPConnection in media/libmedia/IMediaHTTPConnection.cpp. The readAt function may overflow a buffer when processing data provided by another application, leading to memory corruption and potential code execution within the medias...
PT-2015-2220
Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48I Description The issue is caused by a buffer overflow in the readAt function in BpMediaHTTPConnection in the mediaserver service. This allows attackers to execute arbitrary code via a crafted application...
CVE-2015-3831
Buffer overflow in the readAt function in BpMediaHTTPConnection in media/libmedia/IMediaHTTPConnection.cpp in the mediaserver service in Android before 5.1.1 LMY48I allows attackers to execute arbitrary code via a crafted application, aka internal bug 19400722...
PT-2015-2213
Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48I Description The issue is related to multiple heap-based buffer overflows in the libeffects library of the Audio Policy Service in mediaserver. This allows attackers to execute arbitrary code via a crafted...
CVE-2015-3842
Multiple heap-based buffer overflows in libeffects in the Audio Policy Service in mediaserver in Android before 5.1.1 LMY48I allow attackers to execute arbitrary code via a crafted application, aka internal bug 21953516...
Stagefrightened?
Posted by Mark Brand, Bypasser of Mitigations There’s been a lot of attention recently around a number of vulnerabilities in Android’s libstagefright. There’s been a lot of confusion about the remote exploitability of the issues, especially on modern devices. In this blog post we will demonstrate...
Android mediaserver components exposed high-risk vulnerabilities CVE-2 0 1 5-3 8 4 2, and affects all Android devices-vulnerability warning-the black bar safety net
! On the weeks, Android broke a wave of vulnerabilities, including Stagefright, a 0day serialization vulnerabilities, the Certifi-Gate vulnerability, etc., recent trends in science and technology fellows and broke yet another high-risk VulnerabilityCVE-2 0 1 5-3 8 4 2, and this one vulnerability...
Another Critical Flaw Affecting Almost All Android Devices
Two weeks ago, we reported about a critical mediaserver vulnerability that threatened to crash more than 55 percent of Android devices, making them unresponsive and practically unusable to perform most essential tasks. Now, security researchers at Trend Micro have uncovered another flaw in the...
Android Stagefright MP4 tx3g Integer Overflow
This module exploits an integer overflow vulnerability in the Stagefright Library libstagefright.so. The vulnerability occurs when parsing specially crafted MP4 files. While a wide variety of remote attack vectors exist, this particular exploit is designed to work within an HTML5 compliant browse...
Android Vulnerability Traps Devices in 'Endless Reboot Loop'
Poor Android users are facing a terrible, horrible, and awful week. Few days ago, Trend Micro security researchers uncovered a Android crashing vulnerability in the widely used mobile operating system, impacting the majority of Android devices in use. The report follows another significant...
Android mediaserver service integer overflow denial of service vulnerability
mediaserver is a service used by Android to index media files on devices. An integer overflow vulnerability exists in Android versions 4.3 Jelly Bean-5.1.1 Lollipop of mediaserver when processing malformed MKV files. A remote attacker exploiting this vulnerability via a malicious Android app or...
Then the probe Stagefright vulnerability: on POC with the EXP-bug warning-the black bar safety net
Foreword In before the topic--Stagefright vulnerability: a preliminary study, we determined the vulnerability of the generating position, and then the whole article just stopped short. This vulnerability after all the impact is very deep, and some details do not know when to speak improper to...
Android and then exposed the new vulnerability: remote causing the user can not receive calls-vulnerability warning-the black bar safety net
! This week is is the Android device the“Black week”, a few days ago has just been broke Stagefight media library on there worth a“heart blood”of high-risk vulnerabilities, this two-day security researchers then aeration may be the remote cause of the Android device is not properly connected to t...
New Android Vulnerability Could Crash your Phones Badly
Bad week for Android. Just days after a critical Stagefright vulnerability was revealed in the widely popular mobile platform, another new vulnerability threatens to make most Android devices unresponsive and practically unusable to essential tasks. Security researchers at Trend Micro have...
Exploit for CVE-2015-1528
This PoC is divided into three Parts, the folder mediaserver hel...
Mediaserver code execution
Two vulnerabilities which allow arbitrary code execution in the mediaserver process...
FireFly Mediaserver 1.0.0.1359 NULL Pointer Dereference
No description provided by source...
[SECURITY] Fedora 17 Update: mediatomb-0.12.1-23.fc17
MediaTomb is an open source GPL UPnP MediaServer with a nice web user interface, it allows you to stream your digital media through your home network and listen to/watch it on a variety of UPnP compatible devices. MediaTomb implements the UPnP MediaServer V 1.0 specification that can be found on...
[SECURITY] Fedora 18 Update: mediatomb-0.12.1-23.fc18
MediaTomb is an open source GPL UPnP MediaServer with a nice web user interface, it allows you to stream your digital media through your home network and listen to/watch it on a variety of UPnP compatible devices. MediaTomb implements the UPnP MediaServer V 1.0 specification that can be found on...
