Adobe Flash - Processing AVC Causes Stack Corruption

Adobe Flash - Processing AVC Causes Stack Corruption Source: https://code.google.com/p/google-security-research/issues/detail?id=634 The attached mp4 file causes stack corruption in Flash. To run the test, load LoadMP42.swf?file=null.mp4 from a remote server. Proof of Concept:...

Vulnerability of Firefox and Firefox ESR browsers, allowing attackers to execute arbitrary code

The vulnerability of the MPEG4Extractor::readMetaData function located in MPEG4Extractor.cpp, within libstagefright in Firefox and Firefox ESR browsers is related to a potential overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially crafte...

CVE-2015-6602

libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file, as demonstrated by an attack against use of libutils by libstagefright in Android 5.x...

CVE-2015-3417

Use-after-free vulnerability in the ffh264freetables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted H.264 data in an MP4 file, as demonstrated by an HTML VIDEO element that references...

Updated vlc packages fix security vulnerabilities

Updated vlc packages fix security vulnerabilities: On 32 bit builds, parsing of update status files with a size of 4294967295 or more lead to an integer truncation caused by a cast to sizet in a call to malloc and a subsequent buffer overflow. This happened prior to checking the files' signature...

DSA-3150-1 vlc - security update

Bulletin has no description...

Adobe Flash Player Use After Free Code Execution (APSB14-24: CVE-2014-8438)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a use-after-free error while loading specially crafted mp4 files. A remote attacker can exploit this issue by enticing the victim to open a specially crafted file...

Apple iTunes < 11.2 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote host is prior to version 11.2. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the CFNetwork HTTPProtocol due to a failure to properly ensure that a Set-Cookie HTTP header is complete before interpreting the header's...

Apple iTunes < 11.2 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes running on the remote host is prior to version 11.2. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the CFNetwork HTTPProtocol due to a failure to properly ensure that a Set-Cookie HTTP header is complete before interpreting the header's...

RealNetworks RealPlayer Heap Based BoF Vulnerability (Mac OS X)

This host is installed with RealPlayer which is prone to heap based buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbrealplayerheapbasedbofvulnmacosx.nasl 6115 2017-05-12 09:03:25Z teissa $ RealNetworks RealPlayer Heap Based BoF Vulnerability Mac OS X Authors: Arun Kallavi...

Mac OS X 10.8 < 10.8.3 Multiple Vulnerabilities (Security Update 2013-001)

Binary data 801018.prm...

Mac OS X 10.8 < 10.8.3 Multiple Vulnerabilities (Security Update 2013-001)

Binary data 6717.prm...

3ivx MPEG-4 MP4 File Handling Stack Overflow - Specific (CVE-2007-6401)

There exists a buffer overflow vulnerability in 3ivx MPEG-4. Specifically, the vulnerability is due to improper handling of MP4 files by the 3ivx MPEG-4 codec plugin. A remote attacker can exploit this vulnerability by enticing the target user to open crafted MP4 file, potentially causing arbitra...

Apple Patches Nine Vulnerabilities in QuickTime 7.7.3 Update

Apple shipped fixes for nine vulnerabilities in its QuickTime multimedia platform. The QuickTime 7.7.3 update resolves bugs for Windows 7, Vista, and XP service pack 2 and later. The first two patches, discovered by IBM X-Force’s Mark Yason and Microsoft’s Jeremy brown respectively, resolve a...

VLC Media Player 'MP4' Denial of Service Vulnerability (Windows)

This host is installed with VLC Media Player and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbvlcmediaplayermp4dosvulnwin.nasl 8174 2017-12-19 12:23:25Z cfischer $ VLC Media Player 'MP4' Denial of Service Vulnerability Windows Authors: Madhuri D Copyright:...

ZDI-12-080 : Adobe Flash Player MP4 Stream Decoding Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-080 : Adobe Flash Player MP4 Stream Decoding Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-080 June 6, 2012 - -- CVE ID: CVE-2012-0754 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - -- Affected Vendors:...

Adobe Flash Player MP4 Stream Decoding Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

VideoLAN VLC Media Player 2.0.1 - .mp4 Crash (PoC)

VideoLAN VLC Media Player 2.0.1 - .mp4 Crash PoC Application : VLC 2.0.1 division by zero vulnerability Versions : 2.0.1 Date : 19/04/2012 Auther : Senator of Pirates E-Mail : [email protected] FaceBook : /SenatorofPiratesInfo Bug : ---- division by zero vulnerability during the...

VideoLAN VLC Media Player 2.0.1 - '.mp4' Crash (PoC)

Application : VLC 2.0.1 division by zero vulnerability Versions : 2.0.1 Date : 19/04/2012 Auther : Senator of Pirates E-Mail : [email protected] FaceBook : /SenatorofPiratesInfo Bug : ---- division by zero vulnerability during the handling of the MP4 files. some values is read fro...

VLC 2.0.1 Division By Zero

Application : VLC 2.0.1 division by zero vulnerability Versions : 2.0.1 Date : 19/04/2012 Auther : Senator of Pirates E-Mail : [email protected] FaceBook : /SenatorofPiratesInfo Bug : ---- division by zero vulnerability during the handling of the MP4 files. some values is read fro...