2654 matches found
CVE-2015-2717
Integer overflow in libstagefright in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow and out-of-bounds read via an MP4 video file containing invalid metadata...
firefox: multiple issues
CVE-2015-2708 Memory safety bugs fixed in Firefox ESR 31.7 and Firefox 38: Jesse Ruderman, Mats Palmgren, Byron Campen, and Steve Fink reported memory safety problems and crashes that affect Firefox ESR 31.6 and Firefox 37. - CVE-2015-2709 Memory safety bugs fixed in Firefox 38: Gary Kwong,...
UBUNTU-CVE-2015-2717
Integer overflow in libstagefright in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow and out-of-bounds read via an MP4 video file containing invalid metadata...
PT-2015-5854
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 38.0 Description The issue is related to an integer overflow in libstagefright, which allows remote attackers to execute arbitrary code or cause a denial of service. This can be achieved through an MP4 video...
mozilla -- multiple vulnerabilities
The Mozilla Project reports: MFSA-2015-46 Miscellaneous memory safety hazards rv:38.0 / rv:31.7 MFSA-2015-47 Buffer overflow parsing H.264 video with Linux Gstreamer MFSA-2015-48 Buffer overflow with SVG content and CSS MFSA-2015-49 Referrer policy ignored when links opened by middle-click and...
Buffer overflow and out-of-bounds read while parsing MP4 video metadata — Mozilla
Security researcher laf.intel reported a buffer overflow and out-of-bounds read in the libstagefright library while parsing invalid metadata in MPEG4 video files. This can lead to a potentially exploitable crash...
Updated gstreamer0.10-plugins-bad packages fix security vulnerabilities
Updated gstreamer0.10-plugins-bad packages fix security vulnerability: Aki Helin discovered a buffer overflow in the GStreamer plugin for MP4 playback, which could lead in the execution of arbitrary code CVE-2015-0797...
MGASA-2015-0188 Updated gstreamer0.10-plugins-bad packages fix security vulnerabilities
Updated gstreamer0.10-plugins-bad packages fix security vulnerability: Aki Helin discovered a buffer overflow in the GStreamer plugin for MP4 playback, which could lead in the execution of arbitrary code CVE-2015-0797...
FFmpeg Memory Misreference Vulnerability
FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A memory misreference vulnerability exists in the 'ffh264freetables' function in the libavcodec/h264.c file in FFmpeg versions prior to 2.3.6. A remote attacker can exploit this vulnerabili...
Adobe Flash Player Memory Corruption (APSB15-06: CVE-2015-0360)
A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted mp4 file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted mp4 file...
CVE-2015-3417
Use-after-free vulnerability in the ffh264freetables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted H.264 data in an MP4 file, as demonstrated by an HTML VIDEO element that references...
CVE-2015-3417
Use-after-free vulnerability in the ffh264freetables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted H.264 data in an MP4 file, as demonstrated by an HTML VIDEO element that references...
Design/Logic Flaw
Use-after-free vulnerability in the ffh264freetables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted H.264 data in an MP4 file, as demonstrated by an HTML VIDEO element that references...
UBUNTU-CVE-2015-3417
Use-after-free vulnerability in the ffh264freetables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted H.264 data in an MP4 file, as demonstrated by an HTML VIDEO element that references...
CVE-2015-3417
Use-after-free vulnerability in the ffh264freetables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted H.264 data in an MP4 file, as demonstrated by an HTML VIDEO element that references...
CVE-2015-3417
CVE-2015-3417 describes a use-after-free in FFmpeg's libavcodec/h264.c (ff_h264_free_tables) that can be triggered by crafted H.264 data in an MP4, potentially causing a denial of service. The vulnerability affects FFmpeg/libav prior to a fixed version referenced in multiple advisories. Publicly ...
CVE-2015-3417
Use-after-free vulnerability in the ffh264freetables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted H.264 data in an MP4 file, as demonstrated by an HTML VIDEO element that references...
CVE-2015-3417
Use-after-free vulnerability in the ffh264freetables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted H.264 data in an MP4 file, as demonstrated by an HTML VIDEO element that references...
SUSE-SU-2015:0942-1 Security update for gstreamer-0_10-plugins-bad
gstreamer-010-plugins-bad was updated to fix a security issue, a buffer overflow in mp4 parsing bnc927559 CVE-2015-0797...
PT-2015-6223
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.3.6 Description A use-after-free issue exists in the ff h264 free tables function, allowing remote attackers to potentially cause a denial of service or have other unspecified impacts through crafted H.264 data in an...