VLC -- Heap corruption in MP4 demultiplexer

VideoLAN project reports: When parsing some MP4 MPEG-4 Part 14 files, insufficient buffer size might lead to corruption of the heap...

Microsoft Windows multiple security vulnerabilities

Privilege escalation and code execution in spooler services,memory corruption in MPEG-4 codec, memroy corruption in RPC, privilege escalation in LSA, privilege escalation in CSRSS subsystem, WordPad memory corruption...

Code injection

The MPEG-4 codec in the Windows Media codecs in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 does not properly handle crafted media content with MPEG-4 video encoding, which allows remote attackers to execute arbitrary code via a file in an...

CVE-2010-0818

The MPEG-4 codec in the Windows Media codecs in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 does not properly handle crafted media content with MPEG-4 video encoding, which allows remote attackers to execute arbitrary code via a file in an...

CVE-2010-0818

The CVE-2010-0818 issue affects the MPEG-4 codec in Windows Media codecs on Windows XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, and Server 2008 Gold/SP2. Root cause: a buffer/handling flaw in the MPEG-4 codec when processing specially crafted media content with MPEG-4 video encoding, allowing rem...

MPEG-4 Codec Remote Code Execution Vulnerability (975558)

This host is missing a critical security update according to Microsoft Bulletin MS10-062. OpenVAS Vulnerability Test $Id: secpodms10-062.nasl 7174 2017-09-18 11:48:08Z asteins $ MPEG-4 Codec Remote Code Execution Vulnerability 975558 Authors: Veerendra G.G Copyright c 2010 SecPod,...

Microsoft Security Bulletin MS10-062 - Critical Vulnerability in MPEG-4 Codec Could Allow Remote Code Execution (975558)

Microsoft Security Bulletin MS10-062 - Critical Vulnerability in MPEG-4 Codec Could Allow Remote Code Execution 975558 Published: September 14, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in MPEG-4 codec. The vulnerabili...

MPEG-4 Codec RCE Vulnerability (975558)

This host is missing a critical security update according to Microsoft Bulletin MS10-062. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft plugs Eleven Vulnerabilities with Patch Tuesday Update

Microsoft issued nine security bulletins on Tuesday, fixing eleven vulnerabilities in products ranging from Windows, to Microsoft Office, to Internet Information Services. The patch release, part of the company’s monthly Patch Tuesday release included a fix for a previously undisclosed...

Microsoft Windows Media Player MPEG-4 Codec Code Execution (MS10-062; CVE-2010-0818)

MPEG-4 is an International Standards Organization ISO specification that covers many aspects of multimedia presentation including compression, authoring and delivery. A remote code execution vulnerability has been reported in the way the MPEG-4 codec handles supported format files. The...

MS10-062: Vulnerability in MPEG-4 Codec Could Allow Remote Code Execution (975558)

The MPEG-4 codec, which is included with Windows Media codecs, contains a buffer overflow vulnerability that can be triggered by a specially crafted media file that uses MPEG-4 video encoding. If an attacker can trick a user on the affected system into opening a specially crafted media file or...

Microsoft MPEG-4 Codec Media File Remote Code Execution Vulnerability

Description Microsoft MPEG-4 codec is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file or view a web page containing a malicious file. A successful exploit will result in the execution of arbitrary...

Apple QuickTime MOV File JVTCompEncodeFrame Heap Overflow (CVE-2007-2295)

Apple QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous audio/video formats. One of the supported video format is the ITU-T H.264 standard, also known as MPEG-4 Part 10 or Advanced Video...

3ivx MPEG-4 MP4 File Handling Stack Overflow (CVE-2007-6401)

MPEG-4 Part 14, formally ISO/IEC 14496-14:2003, is a multimedia container format standard specified as a part of MPEG-4. It is most commonly used to store digital audio and digital video streams, especially those defined by MPEG, but can also be used to store other data such as subtitles and stil...

Apple QuickTime Multiple Vulnerabilities (Sep 2009)

Apple QuickTime is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:quicktime";...

Apple QuickTime Multiple Vulnerabilities - Sep09

The host is installed with Apple QuickTime and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodapplequicktimemultvulnsep09.nasl 5055 2017-01-20 14:08:39Z teissa $ Apple QuickTime Multiple Vulnerabilities - Sep09 Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod,...

About the security content of QuickTime 7.6.4

About the security content of QuickTime 7.6.4 Last Modified: September 09, 2009 Article: HT3859 Summary This document describes the security content of QuickTime 7.6.4. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has...

Apple QuickTime multiple security vulnerabilities

Buffer overflow on MPEG-4, H.264 and FlashPix data parsing...

CVE-2009-2203

Buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MPEG-4 video file...

Buffer overflow

Buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MPEG-4 video file...