Bento4 mp42ts 'AP4_AtomSampleTable::GetSample' function denial of service vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. mp42ts is one of the tools to convert MP4 files to MPEG2-TS files. A security vulnerability in the Bento4 mp42ts 'AP4AtomSampleTable::GetSample' function allows remote attackers to exploit the vulnerability by submitting a...

Memory Override Access Vulnerability in QQ Music Client

QQ Music client is Tencent's music playback software. A memory override access vulnerability exists in the qmpmp3.dll module of the QQ Music client when parsing a specific mp3, which can be exploited by an attacker to cause a denial of service...

MP3 WAV to CD Burner 1.4.24 - Buffer Overflow (SEH) Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: MP3 WAV to CD Burner 1.4.24 - 'Enter User Name' Field Buffer Overflow SEH Date: 24-08-2017 Exploit Author: Anurag Srivastava Website: www.pyramidcyber.com Vulnerable Software: MP3 WAV to CD Burner Vendor...

Vulnerability in the MPEG-2 decoder of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability in the MPEG-2 decoder of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

MP3 WAV to CD Burner 1.4.24 - Local Buffer Overflow (SEH)

MP3 WAV to CD Burner 1.4.24 - Local Buffer Overflow SEH !/usr/bin/python Exploit Title: MP3 WAV to CD Burner 1.4.24 - 'Enter User Name' Field Buffer Overflow SEH Date: 24-08-2017 Exploit Author: Anurag Srivastava Website: www.pyramidcyber.com Vulnerable Software: MP3 WAV to CD Burner Vendor...

Android Media framework mpeg2 decoder remote code execution vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, and Media framework mpeg2 decoder is one of the mpeg2 decoders used for multimedia development. A remote code execution vulnerability exists in the Media framework mpeg2 decoder in...

CVE-2017-0731

A elevation of privilege vulnerability in the Android media framework mpeg4 encoder. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36075363...

CVE-2017-0718

A remote code execution vulnerability in the Android media framework mpeg2 decoder. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37273547...

CVE-2017-0719

A remote code execution vulnerability in the Android media framework mpeg2 decoder. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37273673...

libmad 'mad_decoder_run' function denial of service vulnerability

libmad is an open source MPEG audio decoding library that provides 24-bit PCM output for platforms without floating point support. A security vulnerability exists in the 'maddecoderrun' function of the decoder.c file in libmad version 0.15.1b. A remote attacker can exploit this vulnerability to...

DEBIAN-CVE-2017-11552

mpg321.c in mpg321 0.3.2-1 does not properly manage memory for use with libmad 0.15.1b, which allows remote attackers to cause a denial of service memory corruption seen in a crash in the maddecoderrun function in decoder.c in libmad via a crafted MP3 file...

libmad 0.15.1b - mp3 Memory Corruption

libmad 0.15.1b - mp3 Memory Corruption libmad memory corruption vulnerability ================ Author : qflb.wu =============== Introduction: ============= libmad is a high-quality MPEG audio decoder capable of 24-bit output. Affected version: ===== 0.15.1b Vulnerability Description:...

UBUNTU-CVE-2017-11551

The id3fieldparse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service OOM via a crafted MP3 file...

Freeware Advanced Audio mp4ff_read_mdhd Denial of Service Vulnerability

Freeware Advanced Audio Decoder is advanced audio encoder. Freeware Advanced Audio Decoder 2 FAAD2 version 2.7, a security vulnerability in the common/mp4ff/mp4atom.c/mp4ffreadmdhd function could allow a remote attacker to cause a denial of service vulnerability via a constructed mp4 file...

DEBIAN-CVE-2017-9220

The mp4ffreadstco function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 FAAD2 2.7 allows remote attackers to cause a denial of service memory allocation error via a crafted mp4 file...

PT-2017-3888 · Audiocoding +1 · Faad2 +1

Name of the Vulnerable Software and Affected Versions: FAAD2 version 2.7 Description: The issue is related to the mp4ff read stco function in the common/mp4ff/mp4atom.c file of the FAAD2 audio decoder. It involves a buffer overflow in memory, which can be exploited by an attacker using a speciall...

LAME 3.99.5 - II_step_one Buffer Overflow

LAME 3.99.5 - IIstepone Buffer Overflow Description: lame is a high quality MPEG Audio Layer III MP3 encoder licensed under the LGPL. Few notes before the details of this bug. Time ago a fuzz was done by Brian Carpenter and Jakub Wilk which posted the results on the debian bugtracker. In cases li...

LAME 3.99.5 - 'II_step_one' Buffer Overflow

Description: lame is a high quality MPEG Audio Layer III MP3 encoder licensed under the LGPL. Few notes before the details of this bug. Time ago a fuzz was done by Brian Carpenter and Jakub Wilk which posted the results on the debian bugtracker. In cases like this, when upstream is not active and...

LAME 3.99.5 - II_step_one Buffer Overflow Exploit

Exploit for linux platform in category dos / poc Description: lame is a high quality MPEG Audio Layer III MP3 encoder licensed under the LGPL. Few notes before the details of this bug. Time ago a fuzz was done by Brian Carpenter and Jakub Wilk which posted the results on the debian bugtracker. In...

DEBIAN-CVE-2017-9870

The IIIistereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service buffer over-read and application crash via a crafted audio file that is mishandled in the code for the "blocktype == 2" case, a similar...