Lucene search
+L

1611 matches found

Positive Technologies
Positive Technologies
•added 2010/04/14 12:00 a.m.•14 views

PT-2010-2241 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: A remote code execution issue exists in the way Microsoft MPEG Layer-3 codecs handle AVI media files. This could allow remote code execution if a user opens a specially crafte...

9.3CVSS6.7AI score0.67888EPSS
SaveExploits14References11
OpenVAS
OpenVAS
•added 2010/04/14 12:00 a.m.•35 views

Microsoft MPEG Layer-3 Codecs Remote Code Execution Vulnerability (977816)

This host is missing a critical security update according to Microsoft Bulletin MS10-026. OpenVAS Vulnerability Test $Id: secpodms10-026.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft MPEG Layer-3 Codecs Remote Code Execution Vulnerability 977816 Authors: Madhuri D Updated By: Madhuri D on...

9.3CVSS0.6AI score0.67888EPSS
SaveExploits14References2
OpenVAS
OpenVAS
•added 2010/04/14 12:00 a.m.•53 views

Microsoft MPEG Layer-3 Codecs Remote Code Execution Vulnerability (977816)

This host is missing a critical security update according to Microsoft Bulletin MS10-026. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

9.3CVSS5AI score0.67888EPSS
SaveExploits14References2
Metasploit
Metasploit
•added 2010/04/13 12:00 a.m.•59 views

MS10-026 Microsoft MPEG Layer-3 Audio Stack Based Overflow

This module exploits a buffer overflow in l3codecx.ax while processing a AVI files with MPEG Layer-3 audio contents. The overflow only allows to overwrite with 0's so the three least significant bytes of EIP saved on stack are overwritten and shellcode is mapped using the .NET DLL memory techniqu...

9.3CVSS5.7AI score0.67888EPSS
SaveExploits14
Tenable Nessus
Tenable Nessus
•added 2010/04/13 12:00 a.m.•280 views

MS10-026: Vulnerability in Microsoft MPEG Layer-3 Codecs Could Allow Remote Code Execution (977816)

The Microsoft MPEG Layer-3 MP3 codecs have a buffer overflow vulnerability that is triggered by opening a specially crafted AVI file with an MP3 audio stream. A remote attacker could exploit this by tricking a user into opening a malicious AVI file, which would lead to arbitrary code execution. C...

9.3CVSS6.3AI score0.67888EPSS
SaveExploits14References2
Check Point Advisories
Check Point Advisories
•added 2010/04/13 12:00 a.m.•58 views

Microsoft MPEG Layer-3 Audio Decoder Stack Overflow (MS10-026; CVE-2010-0480)

MPEG Layer-3 audio codecs are the MPEG Layer-3 Audio Codec for Microsoft DirectShow l3codecx.ax and the Fraunhofer IIS MPEG Layer-3 ACM codecs L3codeca.acm and L3codecp.acm. These MPEG Layer-3 audio codecs are provided along with Windows Media files on affected versions of Microsoft Windows. A...

9.3CVSS6.8AI score0.67888EPSS
SaveExploits14
securityvulns
securityvulns
•added 2010/04/05 12:00 a.m.•71 views

ZDI-10-045: Apple QuickTime MPEG-1 genl Atom Remote Code Execution Vulnerability

ZDI-10-045: Apple QuickTime MPEG-1 genl Atom Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-045 April 2, 2010 -- CVE ID: CVE-2010-0526 -- Affected Vendors: Apple -- Affected Products: Apple OS X -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

4.3CVSS0.8AI score0.04772EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2010/04/02 12:00 a.m.•38 views

Apple QuickTime MPEG-1 genl Atom Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists during the parsing of...

4.3CVSS5.7AI score0.04772EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2010/03/31 12:00 a.m.•67 views

QuickTime < 7.6.6 Multiple Vulnerabilities (Windows)

The version of QuickTime installed on the remote Windows host is older than 7.6.6. Such versions contain several vulnerabilities : - A heap-based buffer overflow in QuickTime's handling of PICT images may lead to an application crash or arbitrary code execution. CVE-2009-2837 - A memory corruptio...

9.3CVSS6AI score0.18573EPSS
SaveExploits12References19
Tenable Nessus
Tenable Nessus
•added 2010/03/31 12:00 a.m.•57 views

QuickTime < 7.6.6 Multiple Vulnerabilities (Mac OS X)

The version of QuickTime installed on the remote Mac OS X host is older than 7.6.6. Such versions contain several vulnerabilities : - A memory corruption issue in QuickTime's handling of QDM2 encoded audio content may lead to an application crash or arbitrary code execution. CVE-2010-0059 - A...

6.8CVSS6AI score0.18573EPSS
SaveExploits10References14
NVD
NVD
•added 2010/03/30 6:30 p.m.•29 views

CVE-2010-0526

Heap-based buffer overflow in QuickTimeMPEG.qtx in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted genl atom in a QuickTime movie file with MPEG encoding, which is not properly handled during...

4.3CVSS7.8AI score0.04772EPSS
SaveExploits0References8
Prion
Prion
•added 2010/03/30 6:30 p.m.•23 views

Heap overflow

Heap-based buffer overflow in QuickTimeMPEG.qtx in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted genl atom in a QuickTime movie file with MPEG encoding, which is not properly handled during...

4.3CVSS8.4AI score0.04772EPSS
SaveExploits0References8Affected Software2
Cvelist
Cvelist
•added 2010/03/30 6:00 p.m.•38 views

CVE-2010-0526

Heap-based buffer overflow in QuickTimeMPEG.qtx in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted genl atom in a QuickTime movie file with MPEG encoding, which is not properly handled during...

9.4AI score0.04772EPSS
SaveExploits0References8
OpenVAS
OpenVAS
•added 2010/02/25 12:00 a.m.•42 views

Debian Security Advisory DSA 2000-1 (ffmpeg-debian)

The remote host is missing an update to ffmpeg-debian announced via advisory DSA 2000-1. OpenVAS Vulnerability Test $Id: deb20001.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2000-1 ffmpeg-debian Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft...

10CVSS1.6AI score0.17351EPSS
SaveExploits11
OpenVAS
OpenVAS
•added 2010/02/25 12:00 a.m.•78 views

Debian: Security Advisory (DSA-2000-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.6AI score0.17351EPSS
SaveExploits11References3
Tenable Nessus
Tenable Nessus
•added 2010/02/24 12:00 a.m.•51 views

Debian DSA-2000-1 : ffmpeg-debian - several vulnerabilities

Several vulnerabilities have been discovered in ffmpeg, a multimedia player, server and encoder, which also provides a range of multimedia libraries used in applications like MPlayer : Various programming errors in container and codec implementations may lead to denial of service or the execution...

10CVSS8.6AI score0.17351EPSS
SaveExploits11References10
Debian
Debian
•added 2010/02/18 8:42 p.m.•121 views

[SECURITY] [DSA 2000-1] New ffmpeg packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2000-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 18, 2010 http://www.debian.org/security/faq -...

10CVSS7.1AI score0.17351EPSS
SaveExploits11
Check Point Advisories
Check Point Advisories
•added 2010/02/16 12:00 a.m.•34 views

Apple QuickTime MOV File JVTCompEncodeFrame Heap Overflow (CVE-2007-2295)

Apple QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous audio/video formats. One of the supported video format is the ITU-T H.264 standard, also known as MPEG-4 Part 10 or Advanced Video...

9.3CVSS7.2AI score0.06512EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2009/10/01 12:00 a.m.•25 views

3ivx MPEG-4 MP4 File Handling Stack Overflow (CVE-2007-6401)

MPEG-4 Part 14, formally ISO/IEC 14496-14:2003, is a multimedia container format standard specified as a part of MPEG-4. It is most commonly used to store digital audio and digital video streams, especially those defined by MPEG, but can also be used to store other data such as subtitles and stil...

9.3CVSS7.4AI score0.29729EPSS
SaveExploits2
securityvulns
securityvulns
•added 2009/09/11 12:00 a.m.•46 views

Apple QuickTime multiple security vulnerabilities

Buffer overflow on MPEG-4, H.264 and FlashPix data parsing...

9.3CVSS4.4AI score0.05718EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder