Lucene search
+L

1611 matches found

seebug.org
seebug.org
•added 2009/07/06 12:00 a.m.•24 views

DirectShow msvidctl.dll组件解析畸形MPEG2视频格式文件溢出漏洞

“MPEG-2标准”制定于1994年,设计目标是高级工业标准的图象质量以及更高的传输率。MPEG-2所能提供每秒钟3兆到10兆的传输率,其在NTSC制式下的分辨率可达720X486。由于出色的性能表现,MPEG-2被用作DVD的指定标准外,并适用于HDTV高清电视。此外,MPEG-2还广泛用于为广播、有线电视网、电缆网络以及卫星直播提供广播级的数字视频。 是DirectShow相关msvidctl.dll组件解析畸形MPEG2视频格式文件触发溢出,攻击者可以使用普通的javascript堆喷射方式远程执行任意代码。 Windows...

7.1AI score
SaveExploits0
Metasploit
Metasploit
•added 2009/07/05 12:00 a.m.•77 views

Microsoft DirectShow (msvidctl.dll) MPEG-2 Memory Corruption

This module exploits a memory corruption within the MSVidCtl component of Microsoft DirectShow BDATuner.MPEG2TuneRequest. By loading a specially crafted GIF file, an attacker can overrun a buffer and execute arbitrary code. ClassID is now configurable via an advanced option otherwise randomized -...

9.3CVSS6.8AI score0.76576EPSS
SaveExploits11
Prion
Prion
•added 2009/06/19 4:30 p.m.•34 views

Input validation

The MPEG-4 video codec in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to cause a denial of service device reset via a crafted MPEG-4 video file that triggers an "input validation issue."...

7.1CVSS6.8AI score0.02508EPSS
SaveExploits0References7Affected Software1
NVD
NVD
•added 2009/06/19 4:30 p.m.•32 views

CVE-2009-0959

The MPEG-4 video codec in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to cause a denial of service device reset via a crafted MPEG-4 video file that triggers an "input validation issue."...

7.1CVSS6.2AI score0.02508EPSS
SaveExploits0References7
CVE
CVE
•added 2009/06/19 4:00 p.m.•73 views

CVE-2009-0959

CVE-2009-0959 affects Apple iPhone OS 1.0–2.2.1 and iPhone OS for iPod touch 1.1–2.2.1. The vulnerability is in the MPEG-4 video codec and is caused by an input validation issue in a crafted MPEG-4 video file, leading to a denial of service (device reset). Exploitation details are not provided in...

7.1CVSS6.4AI score0.02508EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
•added 2009/06/19 4:00 p.m.•38 views

CVE-2009-0959

The MPEG-4 video codec in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to cause a denial of service device reset via a crafted MPEG-4 video file that triggers an "input validation issue."...

6.2AI score0.02508EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2009/06/19 12:00 a.m.•21 views

PT-2009-3541 · Apple +1 · Ios +1

Name of the Vulnerable Software and Affected Versions: Apple iPhone OS versions 1.0 through 2.2.1 Apple iPhone OS for iPod touch versions 1.1 through 2.2.1 Description: The issue is related to the MPEG-4 video codec, which allows remote attackers to cause a denial of service, resulting in a devic...

7.1CVSS6.5AI score0.02508EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/06/19 12:00 a.m.•6 views

CVE-2009-0959: Improper Input Validation

The MPEG-4 video codec in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to cause a denial of service device reset via a crafted MPEG-4 video file that triggers an "input validation issue."...

7.1CVSS5.8AI score0.02508EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2009/04/23 12:00 a.m.•37 views

Fedora 10 : xine-lib-1.1.16-1.fc10 (2009-0483)

This updates xine-lib to the upstream 1.1.16 release. This fixes several bugs, including the security issues CVE-2008-5234 vector 1, CVE-2008-5236, CVE-2008-5237, CVE-2008-5239, CVE-2008-5240 vectors 3 & 4 and CVE-2008-5243. See http://sourceforge.net/project/shownotes.php?releaseid=652075&groupi...

10CVSS5.4AI score0.05748EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2009/04/17 12:00 a.m.•25 views

GLSA-200904-15 : mpg123: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200904-15 mpg123: User-assisted execution of arbitrary code The vendor reported a signedness error in the storeid3text function in id3.c, allowing for out-of-bounds memory access. Impact : A remote attacker could entice a user to...

10CVSS6.1AI score0.05437EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2009/04/09 12:00 a.m.•83 views

Mandriva Update for kernel MDKSA-2007:195 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDKSA-2007:195 kernel Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

7.8CVSS0.6AI score0.03872EPSS
SaveExploits2References2
OpenVAS
OpenVAS
•added 2009/04/09 12:00 a.m.•95 views

Mandriva Update for kernel MDKSA-2007:195 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDKSA-2007:195 kernel Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

7.8CVSS0.7AI score0.03872EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
•added 2009/03/31 12:00 a.m.•39 views

QuickTime < 7.6.6 Multiple Vulnerabilities

Binary data 801207.prm...

9.3CVSS8.2AI score0.18573EPSS
SaveExploits12References19
Tenable Nessus
Tenable Nessus
•added 2009/03/31 12:00 a.m.•36 views

QuickTime < 7.6.6 Multiple Vulnerabilities

Binary data 5492.prm...

9.3CVSS8.2AI score0.18573EPSS
SaveExploits12References19
OpenVAS
OpenVAS
•added 2009/02/16 12:00 a.m.•72 views

Elecard MPEG Player Buffer Overflow Vulnerability

Elecard MPEG Player is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.2AI score0.05859EPSS
SaveExploits1References3
OpenVAS
OpenVAS
•added 2009/02/16 12:00 a.m.•30 views

Elecard MPEG Player Buffer Overflow Vulnerability

This host is running Elecard MPEG Player and is prone to Buffer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: gbelecardmpegplayerbofvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ Elecard MPEG Player Buffer Overflow Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 Greenbone...

9.3CVSS0.8AI score0.05859EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2009/02/16 12:00 a.m.•16 views

Elecard MPEG Player Application Version Detection

This script detects the installed version of Elecard MPEG Player application and sets the version in KB. OpenVAS Vulnerability Test $Id: gbelecardmpegplayerdetect.nasl 5372 2017-02-20 16:26:11Z cfi $ Elecard MPEG Player Application Version Detection Authors: Nikita MR Copyright: Copyright c 2009...

SaveExploits0
OpenVAS
OpenVAS
•added 2009/02/16 12:00 a.m.•10 views

Elecard MPEG Player Application Version Detection

This script detects the installed version of Elecard MPEG Player application. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7AI score
SaveExploits0
NVD
NVD
•added 2009/02/10 1:30 a.m.•43 views

CVE-2009-0491

Stack-based buffer overflow in Elecard MPEG Player 5.5 build 15884.081218 allows remote attackers to execute arbitrary code via a M3U file containing a long URL...

9.3CVSS8AI score0.05859EPSS
SaveExploits1References4
Prion
Prion
•added 2009/02/10 1:30 a.m.•28 views

Stack overflow

Stack-based buffer overflow in Elecard MPEG Player 5.5 build 15884.081218 allows remote attackers to execute arbitrary code via a M3U file containing a long URL...

9.3CVSS8.7AI score0.05859EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder