Lucene search
+L

2256 matches found

OSV
OSV
added 2021/04/14 2:15 p.m.27 views

CVE-2021-28300

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

9.8CVSS7.7AI score
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2021/04/14 2:15 p.m.33 views

CVE-2021-28300

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

9.8CVSS7.5AI score0.02082EPSS
SaveExploits1References2
Prion
Prion
added 2021/04/14 2:15 p.m.24 views

Null pointer dereference

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

7.5CVSS9.7AI score0.02082EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2021/04/14 2:15 p.m.36 views

UBUNTU-CVE-2021-28300

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

9.8CVSS7.6AI score0.02082EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2021/04/14 1:51 p.m.33 views

CVE-2021-28300

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

9.9AI score0.02082EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2021/04/14 1:51 p.m.61 views

CVE-2021-28300

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

9.8CVSS9.7AI score0.02082EPSS
SaveExploits1
CVE
CVE
added 2021/04/14 1:51 p.m.62 views

CVE-2021-28300

GPAC v0.5.2 contains a NULL Pointer Dereference in isomedia/track.c MergeTrack() that can be triggered by uploading a malicious MP4, allowing remote attackers to execute arbitrary code or cause a Denial-of-Service. This is reflected across multiple sources (CVE-2021-28300, Red Hat, Debian OSV, CN...

9.8CVSS9.6AI score0.02082EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2021/04/14 12:0 a.m.9 views

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the MergeTrack function of the isomedia/track.c module in GPAC v0.5.2. An attacker can exploit this vulnerability by uploading a malicious MP4 file to execute...

9.8CVSS6.2AI score0.02082EPSS
SaveExploits1References2
Citrix
Citrix
added 2021/04/09 12:0 a.m.18 views

MP4 video played on Windows Media Player does not show video on secondary monitor

In a multi-monitor environment, when you play an MP4 video on Windows Media Player the video may not appear if you move the player to the secondary monitor...

7AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/03/30 12:0 a.m.46 views

Apple macOS AudioCodecs MP4 File Parsing Signed to Unsigned Conversion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AudioCodecs module...

7.8CVSS5.6AI score0.01081EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/03/30 12:0 a.m.52 views

Apple macOS AudioToolboxCore MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS3.7AI score0.00817EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/03/30 12:0 a.m.51 views

Apple macOS AudioCodecs MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AudioCodecs module...

7.8CVSS5.5AI score0.0213EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/03/23 12:0 a.m.3 views

Denial of Service Vulnerability in Bento4

bento4 is a C class library and tool designed to read and write ISO-MP4 files. Bento4 suffers from a denial of service vulnerability that can be exploited by an attacker to cause a denial of service...

7AI score
SaveExploits0
CNVD
CNVD
added 2021/01/15 12:0 a.m.6 views

Jiajia MP4 MPG Format Converter is vulnerable to dll hijacking.

Jia Jia MP4 MPG Format Converter is a MP4 and MPG format converter. Jia Jia MP4 MPG Format Converter suffers from a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

7.2AI score
SaveExploits0
CNVD
CNVD
added 2021/01/15 12:0 a.m.6 views

Jiajia MOV MP4 Format Converter is vulnerable to dll hijacking.

Jiajia MOV MP4 Format Converter is a MOV and MP4 format conversion software. Jiajia MOV MP4 Converter suffers from a dll hijacking vulnerability. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...

7.2AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2020/12/16 12:11 p.m.9 views

tika-core: Denial of Service Vulnerabilities in Some of Apache Tika's Parsers

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika users should upgrade ...

5.5CVSS7.4AI score0.0255EPSS
SaveExploits0References4
Veracode
Veracode
added 2020/12/06 3:10 a.m.24 views

Denial Of Service (DoS)

gpac is vulnerable to denial of service. A heap-based buffer over-read in BSReadByte called from gfbsreadbit in utils/bitstream.c allows an attacker to crash the application via a malicious MP4 file...

5.5CVSS3.8AI score0.00934EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
added 2020/12/06 3:10 a.m.21 views

Denial Of Service (DoS)

gpac is vulnerable to denial of serviceDoS. The vulnerability exists in the gflistcount in utils/list.c due to an invalid pointer dereference, allowing a malicious user to crash the application via a crafted MP4 file...

5.5CVSS3.5AI score0.00726EPSS
SaveExploits1References2Affected Software1
Veracode
Veracode
added 2020/12/06 3:10 a.m.20 views

Denial Of Service (DoS)

gpac is vulnerable to denial of service. A use-after-free in gfm2tsprocesspmt in mediatools/mpegts.c allows an attacker to crash the application via a malicious MP4 file...

5.5CVSS3.7AI score0.01035EPSS
SaveExploits1References4Affected Software1
Veracode
Veracode
added 2020/12/06 3:10 a.m.22 views

Denial Of Service (DoS)

GPAC is vulnerable to denial of service. The vulnerability existed because it contains a heap-based buffer over-read in gfm2tsprocesspmt in mediatools/mpegts.c that can cause a denial of service via a crafted MP4 file...

5.5CVSS3.2AI score0.00934EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder