CVE-2017-9302

RealPlayer 16.0.2.32 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mp4 file...

CVE-2017-9302

RealPlayer 16.0.2.32 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mp4 file...

CVE-2017-9302

CVE-2017-9302 affects RealPlayer 16.0.2.32, where a crafted MP4 file can trigger a divide-by-zero error in the player’s handling, leading to a denial of service and application crash. Multiple sources corroborate a DoS impact via specially crafted MP4 input, with the NVD noting a network-exposed ...

CVE-2017-9302

RealPlayer 16.0.2.32 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mp4 file...

CVE-2017-9302: Divide By Zero

RealPlayer 16.0.2.32 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mp4 file...

KLA11033 Denial of service vulnerability in RealPlayer

A divide-by-zero vulnerability was found in the RealPlayer. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via specially designed MP4 file. Original advisories Divided RealPlayer 16.0.2.32 RealPlayer Homepage Exploitation...

PT-2017-18833

Name of the Vulnerable Software and Affected Versions RealPlayer version 16.0.2.32 Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and application crash, via a crafted mp4 file. Recommendations For RealPlayer version 16.0.2.32,...

PT-2017-18294

Name of the Vulnerable Software and Affected Versions Ether Software Easy MOV Converter version 1.4.24 Ether Software Easy DVD Creator affected versions not specified Ether Software Easy MPEG/AVI/DIVX/WMV/RM to DVD affected versions not specified Ether Software Easy Avi/Divx/Xvid to DVD Burner...

SUSE-SU-2017:1010-1 Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues: - A crafted aac audio file could have caused an invalid read and thus corruption or denial of service bsc1024014, CVE-2016-10198 - A crafted mp4 file could have caused an invalid read and thus corruption or denial of service...

Dropbox: avrecode: global-buffer-overflow in get_neighbor()

Source: https://github.com/dropbox/avrecode Version: 2de743d Built using the Github instructions with afl-gcc and ASAN. Feeding this malformed .mp4 to recode triggers a global buffer overflow. ./recode roundtrip test003.mp4 mov,mp4,m4a,3gp,3g2,mj2 @ 0x61b00001f180 Protocol name not provided, cann...

Updated libquicktime packages fix security vulnerability

Integer overflow in the quicktimereadpascal function in libquicktime 1.2.4 and earlier allows remote attackers to cause a denial of service or possibly have other unspecified impact via a crafted hdlr MP4 atom. CVE-2016-2399...

Google Chrome < 57.0.2987.98 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 57.0.2987.98. It is, therefore, affected by multiple vulnerabilities as referenced in the 201703stable-channel-update-for-desktop advisory. - An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac,...

Easy MOV Converter 1.4.24 - Local Buffer Overflow (SEH)

Easy MOV Converter 1.4.24 - Local Buffer Overflow SEH !/usr/bin/python Exploit Title : Easy MOV Converter - 'Enter User Name' Field SEH Overwrite POC Date : 12/03/2017 Exploit Author : Muhann4d Vendor Homepage : http://www.divxtodvd.net/ Software Link : http://www.divxtodvd.net/easymovconverter.e...

SUSE-SU-2017:0624-1 Security update for libquicktime

This update for libquicktime fixes the following issues: - A crafted MP4 file could have caused libquicktime to crash or lead to undefined behaviour bsc1022805, CVE-2016-2399...

SUSE-SU-2017:0610-1 Security update for libquicktime

This update for libquicktime fixes the following issues: - A crafted MP4 file could have caused libquicktime to crash or lead to undefined behaviour bsc1022805, CVE-2016-2399...

Debian DSA-3800-1 : libquicktime - security update

Marco Romano discovered that libquicktime, a library for reading and writing QuickTime files, was vulnerable to an integer overflow attack. When opened, a specially crafted MP4 file would cause a denial of service by crashing the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...

[SECURITY] [DLA 844-1] libquicktime security update

Package : libquicktime Version : 2:1.2.4-3+deb7u1 CVE ID : CVE-2016-2399 Debian Bug : 855099 Marco nemux Romano discovered that an integer overflow in the quicktimereadpascal function in libquicktime 1.2.4 and earlier allows remote attackers to cause a denial of service or possibly have other...

Debian DLA-844-1 : libquicktime security update

Marco 'nemux' Romano discovered that an integer overflow in the quicktimereadpascal function in libquicktime 1.2.4 and earlier allows remote attackers to cause a denial of service or possibly have other unspecified impact via a crafted hdlr MP4 atom. For Debian 7 'Wheezy', these problems have bee...

Adobe Flash - MP4 AMF Parsing Overflow Exploit

Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1018 There is an overflow in MP4 AMF parsing. To reproduce, put the attached files on a server and visit http://127.0.0.1/LoadMP4.swf?file=unsigned.mp4. 0day.today 2018-01-01...

Adobe Flash - MP4 AMF Parsing Overflow

Adobe Flash - MP4 AMF Parsing Overflow Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1018 There is an overflow in MP4 AMF parsing. To reproduce, put the attached files on a server and visit http://127.0.0.1/LoadMP4.swf?file=unsigned.mp4. Proof of Concept:...