CVE-2019-13602

An Integer Underflow in MP4EIA608Convert in modules/demux/mp4/mp4.c in VideoLAN VLC media player through 3.0.7.1 allows remote attackers to cause a denial of service heap-based buffer overflow and crash or possibly have unspecified other impact via a crafted .mp4 file...

CVE-2019-13602

CVE-2019-13602 affects VideoLAN VLC media player up to version 3.0.7.1. The vulnerability is an integer underflow in the function MP4_EIA608_Convert() (modules/demux/mp4/mp4.c) that can allow a remote attacker to cause a DoS via heap-based buffer overflow and crash or other unspecified impact thr...

CVE-2019-13602

An Integer Underflow in MP4EIA608Convert in modules/demux/mp4/mp4.c in VideoLAN VLC media player through 3.0.7.1 allows remote attackers to cause a denial of service heap-based buffer overflow and crash or possibly have unspecified other impact via a crafted .mp4 file...

CVE-2019-13602

An Integer Underflow in MP4EIA608Convert in modules/demux/mp4/mp4.c in VideoLAN VLC media player through 3.0.7.1 allows remote attackers to cause a denial of service heap-based buffer overflow and crash or possibly have unspecified other impact via a crafted .mp4 file...

CVE-2019-13602: Integer Underflow (Wrap or Wraparound)

An Integer Underflow in MP4EIA608Convert in modules/demux/mp4/mp4.c in VideoLAN VLC media player through 3.0.7.1 allows remote attackers to cause a denial of service heap-based buffer overflow and crash or possibly have unspecified other impact via a crafted .mp4 file...

VideoLAN VLC media player digital error vulnerability

VideoLAN VLC media player is a free, open source cross-platform multimedia player also a multimedia framework organized by VideoLAN France. The product supports the playback of a variety of media files, CD-ROMs, etc., a variety of audio and video formats WMV, MP3, etc. and so on. A numeric error...

UBUNTU-CVE-2019-13602

An Integer Underflow in MP4EIA608Convert in modules/demux/mp4/mp4.c in VideoLAN VLC media player through 3.0.7.1 allows remote attackers to cause a denial of service heap-based buffer overflow and crash or possibly have unspecified other impact via a crafted .mp4 file...

GoBotKR Targets Pirate Torrents to Build a DDoS Botnet

A botnet dubbed GoBotKR is targeting fans of Korean TV, compromising computers via pirated copies of South Korean movies, games and TV shows available via Korean and Chinese torrent sites. Ultimately, the cybercriminals are building a network that can then be used to perform DDoS attacks of vario...

PT-2019-2909

Name of the Vulnerable Software and Affected Versions VLC media player versions prior to 3.0.7.1 Description The issue is related to an integer underflow in the MP4 EIA608 Convert function, located in modules/demux/mp4/mp4.c, which leads to a heap-based buffer overflow. This can be exploited by a...

Tomabo MP4 Converter 3.25.22 Denial Of Service

-- coding: utf-8 -- Exploit Title: MP4 Converter 3.25.22 - 'Name' Denial of Service PoC Date: 14/05/2019 Author: Alejandra Sánchez Vendor Homepage: http://www.tomabo.com/ Software: http://www.tomabo.com/downloads/mp4-converter-setup.exe Version: 3.25.22 Tested on: Windows 10 Proof of Concept: 1.-...

Tomabo MP4 Converter 3.25.22 - Denial of Service (PoC)

Tomabo MP4 Converter 3.25.22 - Denial of Service PoC -- coding: utf-8 -- Exploit Title: MP4 Converter 3.25.22 - 'Name' Denial of Service PoC Date: 14/05/2019 Author: Alejandra Sánchez Vendor Homepage: http://www.tomabo.com/ Software: http://www.tomabo.com/downloads/mp4-converter-setup.exe Version...

Tomabo MP4 Converter 3.25.22 - Denial of Service (PoC)

-- coding: utf-8 -- Exploit Title: MP4 Converter 3.25.22 - 'Name' Denial of Service PoC Date: 14/05/2019 Author: Alejandra Sánchez Vendor Homepage: http://www.tomabo.com/ Software: http://www.tomabo.com/downloads/mp4-converter-setup.exe Version: 3.25.22 Tested on: Windows 10 Proof of Concept: 1.-...

Tomabo MP4 Converter 3.25.22 - Denial of Service Exploit

-- coding: utf-8 -- Exploit Title: MP4 Converter 3.25.22 - 'Name' Denial of Service PoC Author: Alejandra Sánchez Vendor Homepage: http://www.tomabo.com/ Software: http://www.tomabo.com/downloads/mp4-converter-setup.exe Version: 3.25.22 Tested on: Windows 10 Proof of Concept: 1.- Run the python...

CVE-2018-15000

The Vivo V7 Android device with a build fingerprint of vivo/1718/1718:7.1.2/N2G47H/compil11021857:user/release-keys contains a platform app with a package name of com.vivo.smartshot versionCode=1, versionName=3.0.0. This app contains an exported service named...

Debian DLA-1740-1 : libav security update

Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. CVE-2015-1872 The ffmjpegdecodesof function in libavcodec/mjpegdec.c did not validate the number of components in a JPEG-LS Start Of Frame segment, which allowed remote attackers to caus...

WinAVI iPod3GPMP4PSP Converter 4.4.2 - Denial of Service

WinAVI iPod3GPMP4PSP Converter 4.4.2 - Denial of Service Exploit Title: WinAVI iPod/3GP/MP4/PSP Converter 4.4.2 Local Dos Exploit Date: 16.03.2019 Vendor Homepage:http://www.winavi.com Software Link: http://www.winavi.com/user/download/WinAVIiPod3GPMP4PSPConverter.exe Exploit Author: Achilles...

The vulnerability of the ngx_http_mp4_module module in the nginx server allows a attacker to cause a service failure or expose protected information.

Vulnerability of the ngxhttpmp4module module in the nginx proxy server. Exploiting this vulnerability can allow a malicious actor to trigger an infinite loop in the working process, cause a process crash, or gain access to the process’s memory through a specially created mp4 file...

Bento4 Null Pointer Dereference Vulnerability (CNVD-2019-28478)

Bento4 is a C++ class library and tool for reading and writing ISO-MP4 files. A null pointer dereference vulnerability exists in AP4Track::GetSampleIndexForTimeStampMs in Core/Ap4Track.cpp in Bento4 1.5.1-628, which can be exploited by an attacker to cause a denial of service by sending a special...

Bento4 Buffer Over Read Vulnerability

Bento4 is a C++ class library and tool for reading and writing ISO-MP4 files. A heap buffer over-read vulnerability exists in AP4BitStream::WriteBytes in Codecs/Ap4BitStream.cpp in Bento4 1.5.1-627, which can be exploited by remote attackers to cause a denial of service via specially crafted mp4...

Bento4 Excessive Memory Allocation Attempt Vulnerability (CNVD-2019-28481)

Bento4 is a C++ class library and tool for reading and writing ISO-MP4 files. An excessive memory allocation attempt vulnerability exists in AP4Array::EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627, which can be exploited to cause an out-of-memory condition via specially crafted MP4 input...