CVE-2015-1872

The ffmjpegdecodesof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not validate the number of components in a JPEG-LS Start Of Frame segment, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted...

DEBIAN-CVE-2015-1872

The ffmjpegdecodesof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not validate the number of components in a JPEG-LS Start Of Frame segment, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted...

CVE-2015-1872

The ffmjpegdecodesof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not validate the number of components in a JPEG-LS Start Of Frame segment, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted...

UBUNTU-CVE-2015-1872

The ffmjpegdecodesof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not validate the number of components in a JPEG-LS Start Of Frame segment, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted...

Angler Exploit Kit, Bedep Malware Inflating Video Views

A new sort of hacktivism emerged last week when experts from Trustwave published new research revealing that attackers are using the Angler exploit kit and the Bedep Trojan in order to drive artificial views to politically controversial videos. The motivation for the scheme, it appears, is to...

Unspecified vulnerability in Boosted Boards skateboards

Boosted Boards Skateboards is a popular piece of motorized equipment. Boosted Boards Skateboards has a security vulnerability that allows an attacker with physical access to the device to modify the skateboarding motion by hijacking the Bluetooth signal to physically injure a person...

Google Chrome Information Disclosure Vulnerability (CNVD-2015-01690)

Google Chrome is a simple and efficiently designed web browsing tool developed by Google. An information disclosure vulnerability exists in versions prior to Google Chrome 41.0.2272.76, which allows attackers to exploit the vulnerability to trigger ondevicemotion events via web sites...

Design/Logic Flaw

content/renderer/devicesensors/devicemotioneventpump.cc in Google Chrome before 41.0.2272.76 does not properly restrict access to high-rate accelerometer data, which makes it easier for remote attackers to capture keystrokes via a crafted web site that listens for ondevicemotion events, a differe...

IPUX Cube Type CS303C IP Camera - (UltraMJCamX.ocx) ActiveX Stack Buffer Overflow

Exploit for hardware platform in category web applications IPUX Cube Type CS303C IP Camera UltraMJCamX.ocx ActiveX Stack Buffer Overflow Vendor: Big Good Holdings Limited | Fitivision Technology Inc. Product web page: http://www.ipux.net | http://www.fitivision.com Affected version: Cube Type...

IPUX Cube Type CS303C IP Camera - 'UltraMJCamX.ocx' ActiveX Stack Buffer Overflow

IPUX Cube Type CS303C IP Camera UltraMJCamX.ocx ActiveX Stack Buffer Overflow Vendor: Big Good Holdings Limited | Fitivision Technology Inc. Product web page: http://www.ipux.net | http://www.fitivision.com Affected version: Cube Type ICS303C firmware: ICS303C 1.0.0-17 20140120 r1511 Summary: The...

UBUNTU-CVE-2014-8541

libavcodec/mjpegdec.c in FFmpeg before 2.4.2 considers only dimension differences, and not bits-per-pixel differences, when determining whether an image size has changed, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via...

CVE-2014-7544

The Secret City - Motion Comic aka me.narr8.android.serial.thesecretcity application 2.1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Secret City - Motion Comic aka me.narr8.android.serial.thesecretcity application 2.1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7544

The vulnerability CVE-2014-7544 affects The Secret City - Motion Comic (aka me.narr8.android.serial.the_secret_city) for Android, version 2.1.7. The issue is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitiv...

CVE-2014-7544

The Secret City - Motion Comic aka me.narr8.android.serial.thesecretcity application 2.1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The SPIN - Motion Comic aka me.narr8.android.serial.spin application 2.1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7374

The CVE-2014-7374 entry involves the SPIN - Motion Comic (aka me.narr8.android.serial.spin) Android app, version 2.1.7, which fails to verify X.509 certificates from SSL servers. This behavior allows man-in-the-middle attackers to spoof servers and potentially obtain sensitive information via a c...

CVE-2014-7374

The SPIN - Motion Comic aka me.narr8.android.serial.spin application 2.1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

libX11: Multiple integer overflows leading to heap-based buffer-overflows

Multiple integer overflows in X.org libX11 1.5.99.901 1.6 RC1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the 1 XQueryFont, 2 XF86BigfontQueryFont, 3 XListFontsWithInfo, 4 XGetMotionEvents, 5 XListHosts, 6...

Apple Motion OZDocument::parseElement Integer Overflow (CVE-2013-6114)

An integer overflow has been reported in Apple Motion 5. The vulnerability is due to lack of validation on "subview" values in a "viewer" tag. A remote unauthenticated attacker can leverage this vulnerability by enticing the user to open a specially crafted .motn file. Successful exploitation may...