CVE-2014-2263

The mpegtswritepmt function in the MPEG2 transport stream aka DVB muxer libavformat/mpegtsenc.c in FFmpeg, possibly 2.1 and earlier, allows remote attackers to have unspecified impact and vectors, which trigger an out-of-bounds write...

CVE-2014-2263

CVE-2014-2263 affects FFmpeg’s MPEG2 transport stream muxer (libavformat/mpegtsenc.c): the mpegts_write_pmt function allows an out-of-bounds write. Affected versions are FFmpeg up to 2.1 and earlier; remediation is to upgrade FFmpeg to 2.0.6+ (or newer) per linked advisories. Exploitation details...

CVE-2014-2263

The mpegtswritepmt function in the MPEG2 transport stream aka DVB muxer libavformat/mpegtsenc.c in FFmpeg, possibly 2.1 and earlier, allows remote attackers to have unspecified impact and vectors, which trigger an out-of-bounds write...

CVE-2013-2691

Stack-based buffer overflow in the JetMPG.ax module in jetAudio 8.0.17 allows remote attackers to execute arbitrary code via a crafted MPEG2-TS video file, related to the MPEG2 transport stream...

Stack overflow

Stack-based buffer overflow in the JetMPG.ax module in jetAudio 8.0.17 allows remote attackers to execute arbitrary code via a crafted MPEG2-TS video file, related to the MPEG2 transport stream...

CVE-2013-2691

The CVE-2013-2691 entry describes a stack-based buffer overflow in the JetMPG.ax module of jetAudio 8.0.17, exploitable by a crafted MPEG2-TS video file and allowing remote code execution. The vulnerability affects the JetMPG.ax component when handling MPEG2 transport streams, potentially leading...

CVE-2013-2691

Stack-based buffer overflow in the JetMPG.ax module in jetAudio 8.0.17 allows remote attackers to execute arbitrary code via a crafted MPEG2-TS video file, related to the MPEG2 transport stream...

CVE-2010-0543

ImageIO in Apple Mac OS X 10.5.8, and 10.6 before 10.6.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted movie file with MPEG2 encoding...

Memory corruption

ImageIO in Apple Mac OS X 10.5.8, and 10.6 before 10.6.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted movie file with MPEG2 encoding...

CVE-2010-0543

ImageIO in Apple Mac OS X 10.5.8, and 10.6 before 10.6.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted movie file with MPEG2 encoding...

CVE-2010-0543

CVE-2010-0543 affects Apple Mac OS X 10.5.8 and 10.6 before 10.6.2. The vulnerability lies in ImageIO, exploitable by a crafted MPEG2-encoded movie file. Successful exploitation may allow remote code execution or cause a denial of service via memory corruption and an application crash. Affected c...

Ubuntu 10.04 LTS : linux regression (USN-947-2)

USN-947-1 fixed vulnerabilities in the Linux kernel. Fixes for CVE-2010-0419 caused failures when using KVM in certain situations. This update reverts that fix until a better solution can be found. We apologize for the inconvenience. It was discovered that the Linux kernel did not correctly handl...

USN-947-1: Linux kernel vulnerabilities

It was discovered that the Linux kernel did not correctly handle memory protection of the Virtual Dynamic Shared Object page when running a 32-bit application on a 64-bit kernel. A local attacker could exploit this to cause a denial of service. Only affected Ubuntu 6.06 LTS. CVE-2009-4271 It was...

Design/Logic Flaw

The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvbnet.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers to cause a denial of service infinite loop via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE...

CVE-2010-1086

The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvbnet.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers to cause a denial of service infinite loop via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE...

CVE-2010-1086

The CVE-2010-1086 entry concerns the Linux kernel (dvb-core) ULE decapsulation code in dvb_net.c. A vulnerability in the ULE Payload Pointer handling allows an attacker to induce an infinite-loop denial of service via a crafted MPEG-2 TS frame, affecting kernel 2.6.33 and earlier. Connected advis...

CVE-2010-1086

The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvbnet.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers to cause a denial of service infinite loop via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE...

Linux Kernel dvb_net_ule()函数远程拒绝服务漏洞

BUGTRAQ ID: 38479 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的ULE解封装处理代码中存在拒绝服务漏洞，如果远程用户所发送的MPEG2-TS帧的负载指针为182或183，就会导致ULE SNDU的接收程序陷入死循环。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

For MPEG2 0DAY vulnerability analysis-vulnerability warning-the black bar safety net

该 漏洞 表现 在 在 MSVidCtl.dll（XP SP2:6.5.2600.2180,vista:6.5.6000.16386, With. dll is a system of standard components. To produce the vulnerability of the reason is the incorrect reading of the persistence of the byte array VTUI1|VTARRAY, the attacker can construct a special file to trigger the...

CVE-2008-0015

Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library ATL, as used in the MPEG2TuneRequest ActiveX control in msvidctl.dll in DirectShow, in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold...