MPEG-2 decoder Code Execution

The vulnerability in the MPEG-2 decoder of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Freeware Advanced Audio Coder (FAAC) 1.28 - Denial of Service

Freeware Advanced Audio Coder FAAC 1.28 - Denial of Service Freeware Advanced Audio Coder FAAC multiple vulnerabilities ================ Author : qflb.wu =============== Introduction: ============= FAAC is an encoder for a lossy sound compression scheme specified in MPEG-2 Part 7 and MPEG-4 Part ...

Freeware Advanced Audio Coder (FAAC) 1.28 Denial Of Service

Freeware Advanced Audio Coder FAAC multiple vulnerabilities ================ Author : qflb.wu =============== Introduction: ============= FAAC is an encoder for a lossy sound compression scheme specified in MPEG-2 Part 7 and MPEG-4 Part 3 standards and known as Advanced Audio Coding AAC. This...

Freeware Advanced Audio Coder (FAAC) 1.28 - Denial of Service

Freeware Advanced Audio Coder FAAC multiple vulnerabilities ================ Author : qflb.wu =============== Introduction: ============= FAAC is an encoder for a lossy sound compression scheme specified in MPEG-2 Part 7 and MPEG-4 Part 3 standards and known as Advanced Audio Coding AAC. This...

PT-2017-2680

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.2 Description The issue is related to insufficient access control in the Android media framework, specifically the MPEG-2 decoder. It allows a remote attacker to execute arbitrary code. Recommendations For...

Adobe Flash Player Memory Corruption (APSB15-06: CVE-2015-0354)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted MPEG-2 transport stream file. A remote attacker can exploit this issue and lead to code execution...

Adobe Flash Player Memory Corruption (APSB15-06: CVE-2015-0355)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted MPEG-2 TS file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted MPEG-2 TS file...

Adobe Flash Player Memory Corruption (APSB15-06: CVE-2015-0353)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted MPEG-2 TS file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted MPEG-2 TS file...

RealNetworks RealPlayer MPG Width Integer Underflow Memory Corruption - Ver2 (CVE-2011-4259)

A memory corruption vulnerability has been reported in RealNetworks RealPlayer. The vulnerability is due to an integer underflow condition caused while handling MPEG-2 files with a specially crafted width parameter. An attacker could exploit this vulnerability by enticing a target user to open a...

RealNetworks RealPlayer MPG Width Integer Underflow Memory Corruption - ver 2 (CVE-2011-4259)

An memory corruption vulnerability has been reported in RealNetworks RealPlayer. The vulnerability is due to an integer underflow condition caused while handling MPEG-2 files with a specially crafted width parameter. A remote attacker may exploit this issue by enticing a target user to open a...

Apple QuickTime MPEG-2 Playback Component Code Execution

The remote host contains a copy of the QuickTime MPEG-2 playback component, a commercial add-on to QuickTime distributed by Apple. The remote version of this software is vulnerable to a remote code execution vulnerability. To exploit this flaw, an attacker would need to entice a user to view or...

Apple QuickTime MPEG Stream Padding Code Execution (CVE-2012-0659)

A buffer overflow vulnerability has been reported in Apple QuickTime. The vulnerability is due to a heap-based buffer overflow when calculating the padding for an MPEG sample. A remote attacker can exploit this issue by enticing a target user to open a specially crafted MPEG-2 file. Successful...

RealNetworks RealPlayer MPG Width Integer Underflow Memory Corruption (CVE-2011-4259)

An memory corruption vulnerability has been reported in RealNetworks RealPlayer. The vulnerability is due to an integer underflow condition caused while handling MPEG-2 files with a specially crafted width parameter. A remote attacker may exploit this issue by enticing a target user to open a...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

Updated kernel-rt packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise MRG 1.2. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Microsoft DirectShow - 'msvidctl.dll' MPEG-2 Memory Corruption (MS09-032/MS09-037) (Metasploit)

$Id: msvidctlmpeg2.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

DirectShow msvidctl.dll组件解析畸形MPEG2视频格式文件溢出漏洞

“MPEG-2标准”制定于1994年，设计目标是高级工业标准的图象质量以及更高的传输率。MPEG-2所能提供每秒钟3兆到10兆的传输率,其在NTSC制式下的分辨率可达720X486。由于出色的性能表现，MPEG-2被用作DVD的指定标准外，并适用于HDTV高清电视。此外，MPEG-2还广泛用于为广播、有线电视网、电缆网络以及卫星直播提供广播级的数字视频。 是DirectShow相关msvidctl.dll组件解析畸形MPEG2视频格式文件触发溢出，攻击者可以使用普通的javascript堆喷射方式远程执行任意代码。 Windows...

Microsoft DirectShow (msvidctl.dll) MPEG-2 Memory Corruption

This module exploits a memory corruption within the MSVidCtl component of Microsoft DirectShow BDATuner.MPEG2TuneRequest. By loading a specially crafted GIF file, an attacker can overrun a buffer and execute arbitrary code. ClassID is now configurable via an advanced option otherwise randomized -...

Apple QuickTime MPEG-2播放组件远程内存破坏漏洞

BUGTRAQ ID: 33393 CVECAN ID: CVE-2009-0008 Apple QuickTime是一款非常流行的多媒体播放器。 QuickTime MPEG-2 Playback Component允许QuickTime用户导入和播放特定格式的MPEG-2内容，可从Apple在线商店单独购买和下载。该组件存在输入验证错误，如果访问了特制的电影文件就会导致播放器意外终止或执行任意代码。 Apple QuickTime MPEG-2 Playback Component 7.60 厂商补丁： Apple -----...

Apple QuickTime Multiple Vulnerabilities - Jan09 (Windows)

The host is installed with Apple QuickTime and is prone to Multiple Vulnerabilities. OpenVAS Vulnerability Test $Id: secpodapplequicktimemultvulnjan09win.nasl 6519 2017-07-04 14:08:14Z cfischer $ Apple QuickTime Multiple Vulnerabilities - Jan09 Windows Authors: Chandan S Copyright: Copyright c 20...

Apple QuickTime Multiple Vulnerabilities (Jan 2009) - Windows

Apple QuickTime is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:quicktime";...