MGASA-2021-0431 Updated gpac packages fix security vulnerability

A specially crafted MPEG-4 input when decoding the atom for the "co64" FOURCC can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. CVE-2021-21834 A specially crafted MPEG-4 input using the "ctts" FOURCC code can cause a...

FAAD2 Heap Buffer Overflow Vulnerability (CNVD-2021-89952)

Freeware Advanced Audio Decoder 2 FAAD2 is an open source MPEG-4 and MPEG-2 AAC decoder licensed under the GPLv2 license. sbrqmfsynthesis64 function in sbrqmf.c in FAAD2 2.10.0 and earlier versions is vulnerable to a heap buffer overflow vulnerability. An attacker could exploit this vulnerability...

FAAD2 Stack Buffer Overflow Vulnerability (CNVD-2021-89950)

Freeware Advanced Audio Decoder 2 FAAD2 is an open source MPEG-4 and MPEG-2 AAC decoder licensed under the GPLv2 license. a stack buffer overflow vulnerability exists in the ftypin function in mp4read.c in FAAD2 2.10.0 and earlier versions. An attacker could exploit this vulnerability to execute...

FAAD2 Heap Buffer Overflow Vulnerability

Freeware Advanced Audio Decoder 2 FAAD2 is an open source MPEG-4 and MPEG-2 AAC decoder licensed under the GPLv2 license. ltprediction function in ltpredict.c in FAAD2 2.10.0 and earlier versions is vulnerable to a heap buffer overflow vulnerability. An attacker could exploit this vulnerability t...

Bento4 安全漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 that originates from mismanagement of system resources e.g., memory, disk space, files, etc. by a networked system or product...

CVE-2021-38644

Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability...

CVE-2021-38644

Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability...

Remote code execution

Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability...

CVE-2021-38644

CVE-2021-38644 — The vulnerability affects the Windows MPEG-2 Video Extension. It stems from incorrect code generation management in the MPEG-2 Video Extension codec, enabling remote code execution. Exploitation has reportedly been used by malware in the wild. Affected products include Windows cl...

CVE-2021-38644 Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability

...

Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability

...

Microsoft Windows MPEG-2 Video Extension RCE (September 2021)

The Windows 'MPEG-2 Video Extension' app installed on the remote host is affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for this issue but has instead relied only...

DEBIAN-CVE-2021-32138

The DumpTrackInfo function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

Denial Of Service

gpac is vulnerable to denial of service. The vulnerability exists due to an exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library...

Denial Of Service (DoS)

gpac:bullseye is vulnerable to denial of service. An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input using the “ctts” FOURCC code can cause an integer overflow due t...

Denial Of Service (DoS)

gpac:bullseye is vulnerable to denial of service. Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic...

Denial Of Service (DoS)

gpac:bullseye is vulnerable to denial of service. An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library. A specially crafted MPEG-4 input used to process an atom using the “saio” FOURCC code cause an integer...

Denial Of Service (DoS)

GPAC is vulnerable to denial of service. An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library. A specially crafted MPEG-4 input can cause an integer overflow when processing an atom using the 'ssix' FOURCC...

Denial Of Service (DoS)

gpac:bullseye is vulnerable to denial of service. Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library. A specially crafted MPEG-4 input when encountering an atom using the “stco” FOURCC code, can caus...

Denial Of Service (DoS)

gpac:bullseye is vulnerable to denial of service. Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library. A specially crafted MPEG-4 input in “stsz” decoder can cause an integer overflow due to unchecked...