GLSA-201206-07 : nginx: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201206-07 nginx: User-assisted execution of arbitrary code An error in ngxhttpmp4module.c could cause a buffer overflow. NOTE: nginx must have been emerged with USE='nginxmoduleshttpmp4' in order to be affected by this...

ZDI-12-080 : Adobe Flash Player MP4 Stream Decoding Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-080 : Adobe Flash Player MP4 Stream Decoding Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-080 June 6, 2012 - -- CVE ID: CVE-2012-0754 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - -- Affected Vendors:...

ZDI-12-087 : RealNetworks RealPlayer raac.dll stsz Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-087 : RealNetworks RealPlayer raac.dll stsz Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-087 June 6, 2012 - -- CVE ID: CVE-2011-4260 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - -- Affected Vendors:...

RealNetworks RealPlayer raac.dll stsz Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Adobe Flash Player MP4 Stream Decoding Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

APPLE-SA-2012-05-15-1 QuickTime 7.7.2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2012-05-15-1 QuickTime 7.7.2 QuickTime 7.7.2 is now available and addresses the following: QuickTime Available for: Windows 7, Vista, XP SP2 or later Impact: Visiting a maliciously crafted website may lead to an unexpected application...

Apple QuickTime Multiple Vulnerabilities - Windows

Apple QuickTime is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:quicktime";...

QuickTime < 7.7.2 Multiple Vulnerabilities

Binary data 801194.prm...

Real Networks RealPlayer < 15.0.4.53 Multiple Vulnerabilities

Binary data 6488.prm...

Apple Mac OS X远程代码执行漏洞(CVE-2011-3458)

BUGTRAQ ID: 51809 CVE ID: CVE-2011-3458 OS X Lion Server 内含一组应用软件，可将任意一台Mac 变成功能强大的服务器。Mac OS是一套运行于苹果的Macintosh系列电脑上的操作系统。 Apple Mac OS X 10.7.3之前版本中的QuickTime没有阻止访问未初始化的内存位置，可允许远程攻击者通过特制的MP4文件执行任意代码或造成拒绝服务 0 Apple MacOS X 10.x Apple MacOS X Server 10.7.x Apple QuickTime Player 7.x 厂商补丁： Apple...

Important: nginx

Issue Overview: Buffer overflow in ngxhttpmp4module.c in the ngxhttpmp4module module in nginx 1.0.7 through 1.0.14 and 1.1.3 through 1.1.18, when the mp4 directive is used, allows remote attackers to cause a denial of service memory overwrite or possibly execute arbitrary code via a crafted MP4...

Nokia PC Suite Video Manager 7.1.180.64 (.mp4) Denial of Service

Exploit for windows platform in category dos / poc Application : Nokia PC Suite Video Manager DoS Versions : = 7.1.180.64 Date : Friday, April 27,2012 Auther : Senator of Pirates E-Mail : email protected FaceBook : /SenatorofPiratesInfo Greetz : i greet to my best friends and every moroccan PoC :...

[BSA-069] Security Update for NGINX

Hi. I uploaded new packages for nginx which fixed the following security problems: CVE-2012-2089 - nginx -- arbitrary code execution in mp4 pseudo-streaming module A flaw was reported in the nginx standard mp4 pseudo-streaming module. A specially-crafted mp4 file could allow for the overwriting o...

CVE-2012-2396

VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted MP4 file...

CVE-2012-2396

VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted MP4 file...

CVE-2012-2396

VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted MP4 file...

Denial of service

VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted MP4 file...

CVE-2012-2396

CVE-2012-2396 affects VideoLAN VLC media player 2.0.1. A crafted MP4 file can trigger a divide-by-zero and crash VLC, causing a denial of service. The supplied advisories reference updating VLC (e.g., Gentoo GLSA 201411-01 recommends upgrading to VLC &gt;= 2.1.2) as remediation. No exploit detail...

CVE-2012-2396

VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted MP4 file...

CVE-2012-2396

VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted MP4 file...