Sublime Text Buffer Overflow Vulnerability

Sublime Text is a cross-platform, extensible text editor for code, markup, and more. A buffer overflow vulnerability exists in Sublime Text 3 Build 3126. The vulnerability can be exploited by an attacker to execute code with the help of specially crafted .mkv files...

XnView Classic for Windows Buffer Overflow Vulnerability (CNVD-2017-21799)

XnView Classic for Windows is an image viewing software for Windows developed by French software developer Gougelet Pierre-Emmanuel. The software can be used to view, convert, organize and edit graphic and video files. A buffer overflow vulnerability exists in version 2.40 of XnView Classic for...

CVE-2017-8381

XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted .mkv file that is mishandled during the opening of a directory in "Browser" mode, because of a "User Mode Write AV near NULL" in XnView.exe...

CVE-2017-8368

Sublime Text 3 Build 3126 allows user-assisted attackers to cause a denial of service or possibly have unspecified other impact via a crafted .mkv file. One threat model is a victim who obtains an untrusted crafted file from a remote location and issues several user-defined commands, as...

CVE-2017-8381

XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted .mkv file that is mishandled during the opening of a directory in "Browser" mode, because of a "User Mode Write AV near NULL" in XnView.exe...

CVE-2017-8368

Sublime Text 3 Build 3126 allows user-assisted attackers to cause a denial of service or possibly have unspecified other impact via a crafted .mkv file. One threat model is a victim who obtains an untrusted crafted file from a remote location and issues several user-defined commands, as...

CVE-2017-8368

Sublime Text 3 Build 3126 is reported vulnerable to a user‑assisted DoS (and possibly other impact) via a crafted .mkv file. According to the sources, the issue can be triggered when a user opens a malicious MKV payload and issues commands such as Ctrl‑A, Delete, and Ctrl‑Z, with the exploit requ...

CVE-2017-8381: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted .mkv file that is mishandled during the opening of a directory in "Browser" mode, because of a "User Mode Write AV near NULL" in XnView.exe...

PT-2017-18295

Name of the Vulnerable Software and Affected Versions Sublime Text version 3 Build 3126 Description The issue allows user-assisted attackers to cause a denial of service or possibly have unspecified other impact via a crafted .mkv file. A potential threat model involves a victim obtaining an...

PT-2017-18304

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows user-assisted remote attackers to execute code via a crafted .mkv file that is mishandled during the opening of a directory in "Browser" mode. This is due to a "User Mode Wri...

CVE-2017-8368: Improper Restriction of Operations within the Bounds of a Memory Buffer

Sublime Text 3 Build 3126 allows user-assisted attackers to cause a denial of service or possibly have unspecified other impact via a crafted .mkv file. One threat model is a victim who obtains an untrusted crafted file from a remote location and issues several user-defined commands, as...

PT-2018-3152

Name of the Vulnerable Software and Affected Versions VideoLAN VLC media player versions 2.2.x Description The issue is related to a use after free vulnerability. This can be exploited by an attacker to execute arbitrary code using specially crafted mkv files. Failed attempts to exploit this issu...

The vulnerability of the Android operating system allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the libvpx library in the mediaserver component of the libwebm framework in the Android operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory...

UBUNTU-CVE-2016-2464

libvpx in libwebm in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted mkv file, aka internal bug 23167726...

CVE-2016-2464

libvpx in libwebm in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted mkv file, aka internal bug 23167726...

CVE-2016-2464

libvpx in libwebm in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted mkv file, aka internal bug 23167726...

CVE-2016-2464

CVE-2016-2464 affects libvpx/libwebm in android mediaserver. A crafted MKV file can trigger memory corruption, enabling remote code execution or a denial of service. Affected: Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01. Root cause unspecified in pr...

PT-2016-2265

Name of the Vulnerable Software and Affected Versions Android versions 4.x through 4.4.3 Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-06-01 Description The issue allows remote attackers to execute arbitrary code or cause a denial of...

MKV Amp Player (MP4, DVD) - BSD license, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application MKV Amp Player MP4, DVD published at the 'play' market has multiple vulnerabilities...

Android aeration infinite reboot Vulnerability, CVE-2 0 1 5-3 8 2 3, The impact of almost 9 0% of Android users-vulnerability warning-the black bar safety net

Android users are undoubtedly going through a tough week. This product of the latest vulnerabilities number of CVE-2 0 1 5-3 8 2 3, hackers can take advantage of the loudo make Android phone unlimited reboot, it sounds a bit like Stagefright vulnerability, and it stems from the media server,...