CVE-2021-38644

Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability...

CVE-2021-38644

Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability...

Remote code execution

Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability...

CVE-2021-38644

Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability...

CVE-2021-38644

CVE-2021-38644 — The vulnerability affects the Windows MPEG-2 Video Extension. It stems from incorrect code generation management in the MPEG-2 Video Extension codec, enabling remote code execution. Exploitation has reportedly been used by malware in the wild. Affected products include Windows cl...

CVE-2021-38644 Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability

...

CVE-2021-38644: Undefined Security Weakness

Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability...

Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability

...

Microsoft Windows MPEG-2 Video Extension RCE (September 2021)

The Windows 'MPEG-2 Video Extension' app installed on the remote host is affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for this issue but has instead relied only...

DEBIAN-CVE-2021-32138

The DumpTrackInfo function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

Denial Of Service

gpac is vulnerable to denial of service. The vulnerability exists due to an exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library...

Denial Of Service (DoS)

gpac:bullseye is vulnerable to denial of service. An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input using the “ctts” FOURCC code can cause an integer overflow due t...

Denial Of Service (DoS)

gpac:bullseye is vulnerable to denial of service. Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic...

Denial Of Service (DoS)

gpac:bullseye is vulnerable to denial of service. An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library. A specially crafted MPEG-4 input used to process an atom using the “saio” FOURCC code cause an integer...

Denial Of Service (DoS)

GPAC is vulnerable to denial of service. An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library. A specially crafted MPEG-4 input can cause an integer overflow when processing an atom using the 'ssix' FOURCC...

Denial Of Service (DoS)

gpac:bullseye is vulnerable to denial of service. Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library. A specially crafted MPEG-4 input when encountering an atom using the “stco” FOURCC code, can caus...

Denial Of Service (DoS)

gpac:bullseye is vulnerable to denial of service. Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library. A specially crafted MPEG-4 input in “stsz” decoder can cause an integer overflow due to unchecked...

Denial Of Service (DoS)

gpac:sid is vulnerable to denial of service. Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input at “stss” decoder can cause an integer overflow due to uncheck...

Denial Of Service (DoS)

gpac:sid is vulnerable to denial of service. Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked addition...

Denial Of Service (DoS)

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked addition arithmetic resulting in a heap-based buffer overflo...