PT-2015-2897

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 18.0.0.268 Adobe Flash Player versions 19.x Adobe Flash Player versions 20.x prior to 20.0.0.228 Adobe AIR versions prior to 20.0.0.204 Adobe AIR SDK versions prior to 20.0.0.204 Adobe AIR SDK & Compiler...

Adobe Flash MP3 ID3 COMM Tag Heap Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of MP3...

Mozilla: Out-of-bounds read with malformed MP3 file (MFSA 2015-80)

The mozilla::AudioSink function in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 mishandles inconsistent sample formats within MP3 audio data, which allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via a malformed file...

Mozilla Firefox Arbitrary Code Execution Vulnerability (CNVD-2015-02207)

Mozilla Firefox is a web browser developed by the Mozilla Foundation in conjunction with the open source community. Mozilla Firefox has a security vulnerability. It allows attackers to construct malicious MP3 files and trick users into parsing them for arbitrary code execution or denial of servic...

[SECURITY] Fedora 21 Update: python-eyed3-0.7.4-4.fc21

A Python module and program for processing ID3 tags. Information about mp3 filesi.e bit rate, sample frequency, play time, etc. is also provided. The formats supported are ID3 v1.0/v1.1 and v2.3/v2.4...

[SECURITY] Fedora 20 Update: python-eyed3-0.7.4-4.fc20

A Python module and program for processing ID3 tags. Information about mp3 filesi.e bit rate, sample frequency, play time, etc. is also provided. The formats supported are ID3 v1.0/v1.1 and v2.3/v2.4...

[SECURITY] Fedora 19 Update: python-eyed3-0.7.4-4.fc19

A Python module and program for processing ID3 tags. Information about mp3 filesi.e bit rate, sample frequency, play time, etc. is also provided. The formats supported are ID3 v1.0/v1.1 and v2.3/v2.4...

mb.miniAudioPlayer 1.4.2 - TinyMCE Popup Unspecified Issue

The mb.miniAudioPlayer – an HTML5 audio player for your mp3 files WordPress plugin was affected by a TinyMCE Popup Unspecified Issue security vulnerability...

mpg123 pre0.59s Invalid MP3 Header Memory Corruption Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6593/info A memory corruption vulnerability has been reported for mpg123 that may result in code execution. The vulnerability exists when mpg123 is used to play certain MP3 files. Specifically, when playing MP3 files with...

Apple Mac OS X Multiple Vulnerabilities - 02 (Jan 2014)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-6618

The avprobeinputbuffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running with certain -probesize values, allows remote attackers to cause a denial of service crash via a crafted MP3 file, possibly related to frame size or lack of sufficient "frames to estimate rate."...

Apple QuickTime Multiple Vulnerabilities (Jun 2013) - Windows

QuickTime Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:quicktime";...

PHP 5.4.x < 5.4.16 Multiple Vulnerabilities

According to its banner, the version of PHP 5.4.x installed on the remote host is prior to 5.4.16. It is, therefore, potentially affected by the following vulnerabilities: - An error exists in the mimetype detection of 'mp3' files that could lead to a denial of service. Bug 64830 - An error exist...

VirtualDJ ProHome 7.3 - Local Buffer Overflow

VirtualDJ ProHome 7.3 - Local Buffer Overflow Exploit Title: VirtualDJ Pro/Home =7.3 Buffer Overflow Vulnerability Date: 23.03.2013 Exploit Author: Alexandro Sánchez Bach functionmixer.blogspot.com Vendor Homepage: http://www.virtualdj.com/ Software Link:...

CVE-2011-2844

Google Chrome before 14.0.835.163 does not properly process MP3 files, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

CVE-2011-2844

Google Chrome before 14.0.835.163 does not properly process MP3 files, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

CVE-2011-2844

Removed by vendor...

CVE-2011-2844

Google Chrome before 14.0.835.163 does not properly process MP3 files, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

CVE-2011-2844: Out-of-bounds Read

Google Chrome before 14.0.835.163 does not properly process MP3 files, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

Google Fixes More Than 30 Flaws in Chrome

Google has fixed more than 30 security vulnerabilities in its Chrome browser with a new version the company released on Friday. The company also paid out more than $14,000 in rewards to the various researchers who reported bugs that were fixed with Chrome 14.0.835.163. The new version of Chrome...