Code injection

The checonfigure function in libavcodec/aacdectemplate.c in FFmpeg before 3.2.1 allows remote attackers to cause a denial of service allocation of huge memory, and being killed by the OS via a crafted MOV file...

CVE-2016-9561

The checonfigure function in libavcodec/aacdectemplate.c in FFmpeg before 3.2.1 allows remote attackers to cause a denial of service allocation of huge memory, and being killed by the OS via a crafted MOV file...

UBUNTU-CVE-2016-9561

The checonfigure function in libavcodec/aacdectemplate.c in FFmpeg before 3.2.1 allows remote attackers to cause a denial of service allocation of huge memory, and being killed by the OS via a crafted MOV file...

CVE-2016-9561

The checonfigure function in libavcodec/aacdectemplate.c in FFmpeg before 3.2.1 allows remote attackers to cause a denial of service allocation of huge memory, and being killed by the OS via a crafted MOV file...

CVE-2016-9561

CVE-2016-9561 : FFmpeg’s libavcodec/aacdec_template.c che_configure function allowed remote attackers to trigger a denial-of-service via a crafted MOV file by allocating a huge amount of memory. Affected: FFmpeg prior to 3.2.1 (as stated in the CVE description). Connected references confirm this ...

CVE-2016-9561

The checonfigure function in libavcodec/aacdectemplate.c in FFmpeg before 3.2.1 allows remote attackers to cause a denial of service allocation of huge memory, and being killed by the OS via a crafted MOV file...

openSUSE Security Update : ffmpeg (openSUSE-2016-1365)

This update to ffmpeg 3.2 fixes the following issues : - CVE-2016-5199: Heap corruption in FFmpeg boo1009892 FFmpeg was updated to version 3.2, incorporating the following upstream improvements : - SDL2 output device and ffplay support - SDL1 output device and SDL1 support removed - New: libopenm...

Linux/x86-64 - /bin/sh -c reboot Shellcode (89 bytes)

Linux/x86-64 - /bin/sh -c reboot Shellcode 89 bytes. Shellcode exploit for Linx86-64 platform Name: "Linux reboot bin/sh -c reboot shellcode" 89 bytes Platform: Linux 32 and 64 bit Author: Ashiyane Digital Security Team MALWaRE43 Contact: usertester123546 at gmail.com Tested on: Linux javadkhof...

VUPlayer 2.49 .pls Stack Buffer Overflow

!/usr/bin/python import os,sys Tested Windows 7 Home x86 & Windows 10 Home x86x64 badchars \x00\x0a\x1a\x20\x40 msfvenom -a x86 --platform windows -p windows/exec CMD=calc.exe -b "\x00\x0a\x1a\x20\x40" -f python buf = "" buf += "\xbf\x3b\x99\xdd\xa3\xdb\xc4\xd9\x74\x24\xf4\x58\x29" buf +=...

Apple OS X ACMP4AACBaseDecoder Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to leak sensitive information on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of M...

DEBIAN-CVE-2016-3062

The movreaddref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via the entries value in a dref box in an MP4 file...

Apple QuickTime - MOV File Parsing Memory Corruption

Exploit for macOS platform in category dos / poc Application: Apple Quicktime Platforms: OSX Author: Francis Provencher of COSIG Website: http://www.protekresearchlab.com/ Twitter: @COSIG @protekresearch CVE-2016-1848 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1...

The vulnerability of the FFmpeg multimedia library, which allows a intruder to trigger a service failure or cause other effects

The vulnerability of the asfwritepacket function libavformat/asfenc.c in the FFmpeg multimedia library is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to cause a service failure, or possibly have other effects using a specially crafted PTS value contained in...

DEBIAN-CVE-2016-2326

Integer overflow in the asfwritepacket function in libavformat/asfenc.c in FFmpeg before 2.8.5 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PTS aka presentation timestamp value in a .mov file...

Integer overflow

Integer overflow in the asfwritepacket function in libavformat/asfenc.c in FFmpeg before 2.8.5 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PTS aka presentation timestamp value in a .mov file...

CVE-2016-2326

Integer overflow in the asfwritepacket function in libavformat/asfenc.c in FFmpeg before 2.8.5 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PTS aka presentation timestamp value in a .mov file...

CVE-2016-2326

Integer overflow in the asfwritepacket function in libavformat/asfenc.c in FFmpeg before 2.8.5 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PTS aka presentation timestamp value in a .mov file...

CVE-2016-2326

FFmpeg libavformat/asfenc.c contains an integer overflow vulnerability in the asf_write_packet path (FFmpeg before 2.8.5). A remote attacker can exploit a crafted PTS in a .mov to cause a denial of service (and potentially other impact). Affected component: FFmpeg/libavformat. Root cause: overflo...

CVE-2016-2326

Integer overflow in the asfwritepacket function in libavformat/asfenc.c in FFmpeg before 2.8.5 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PTS aka presentation timestamp value in a .mov file...

The vulnerability of the FFmpeg multimedia library, which allows a intruder to trigger a service failure or cause other effects

The vulnerability of the FFmpeg multimedia library exists due to the retention of width and height parameters after a failure. Exploiting this vulnerability can allow a malicious actor to cause service interruptions or potentially have other effects using a specially created .mov file...