Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks and possibly other attacks. A malicious user can pass a malicious MPEG video file to the system to cause invalid pointer access that can lead to the system crashing...

DEBIAN-CVE-2016-9812

The gstmpegtssectionnew function in the mpegts decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service out-of-bounds read via a too small section...

UBUNTU-CVE-2016-9812

The gstmpegtssectionnew function in the mpegts decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service out-of-bounds read via a too small section...

UBUNTU-CVE-2017-2926

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to processing of atoms in MP4 files. Successful exploitation could lead to arbitrary code execution...

CentOS Update for gstreamer1-plugins-bad-free CESA-2017:0021 centos7

Check the version of gstreamer1-plugins-bad-free SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for gstreamer1-plugins-bad-free RHSA-2017:0021-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 7 : gstreamer1-plugins-bad-free (ELSA-2017-0021)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0021 advisory. 1.4.5-6 - Fix h264 and h265 buffer size checks - Fix mpegts pat parsing and add more size checks Resolves: rhbz1400897 1.4.5-5 - vmncdec: Sanity-check...

Scientific Linux Security Update : gstreamer1-plugins-bad-free on SL7.x x86_64 (20170105)

Security Fixes : - An integer overflow flaw, leading to a heap-based buffer overflow, was found in GStreamer's VMware VMnc video file format decoding plug-in. A remote attacker could use this flaw to cause an application using GStreamer to crash or, potentially, execute arbitrary code with the...

Moderate: Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

gstreamer1-plugins-bad-free: Out-of-bounds read in gst_mpegts_section_new

An out-of-bounds heap read flaw was found in GStreamer's MPEG-TS decoder. A remote attacker could use this flaw to cause an application using GStreamer to crash...

CVE-2016-9813

A NULL pointer dereference flaw was found in GStreamer's MPEG-TS parser. A remote attacker could use this flaw to cause an application using GStreamer to crash...

CVE-2016-9812

An out-of-bounds heap read flaw was found in GStreamer's MPEG-TS decoder. A remote attacker could use this flaw to cause an application using GStreamer to crash...

[SECURITY] [DLA 655-1] mpg123 security update

Several security vulnerabilities have been discovered in mpg123, an MPEG layer 1/2/3 audio decoder and player. An attacker could take advantage of these flaws to cause a denial of service against mpg123 or applications using the libmpg123 library with a carefully crafted input file. CVE-2014-9497...

DLA-655-1 mpg123 - security update

Bulletin has no description...

The vulnerability of the Android operating system, which allows a hacker to trigger a service failure

The vulnerability of the MPEG4Extractor.cpp file in the libstagefright component of the Android operating system’s media server is related to the absence of a memory allocation check. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure device freezi...

The vulnerabilities of the software platforms Flash Player and Adobe Integrated Runtime allow attackers to trigger service failures or execute arbitrary code.

The vulnerability of the Flash Player and Adobe Integrated Runtime programming platforms arises due to buffer overflows. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service interruptions such as out-of-memory reading or memory corruption using special...

The vulnerability of the Thunderbird email client, as well as the Firefox and Firefox ESR browsers, allows a hacker to cause a service failure.

The vulnerability of the libstagefright library in Thunderbird email clients, as well as in Firefox and Firefox ESR browsers, is due to buffer overflows. Exploiting this vulnerability allows a malicious actor to cause a service failure memory consumption by using an MPEG-4 file that initiates the...

The vulnerabilities of the software platforms Flash Player, Flash Player ESR, and Adobe Integrated Runtime allow attackers to trigger service failures or execute arbitrary code.

The vulnerabilities of the software platforms Flash Player, Flash Player ESR, and Adobe Integrated Runtime are caused by buffer overflows. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or trigger service failures such as dereferencing uninitialized pointers o...

The vulnerability of the Adobe Integrated Runtime software allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the Adobe Integrated Runtime software is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or trigger a service failure memory access out of bounds, memory corruption using specially crafted MPEG-4 data...

The vulnerabilities of Adobe Integrated Runtime and Flash Player software allow a perpetrator to execute arbitrary code.

The vulnerability of Adobe Integrated Runtime and Flash Player programs is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted MPEG-4 data...