235 matches found
USN-2349-1: Libav vulnerabilities
It was discovered that Libav incorrectly handled certain malformed media files. If a user were tricked into opening a crafted media file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program...
USN-2309-1: Libav vulnerabilities
It was discovered that Libav incorrectly handled certain malformed media files. If a user were tricked into opening a crafted media file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program...
USN-2277-1: Libav vulnerabilities
It was discovered that Libav incorrectly handled certain malformed media files. If a user were tricked into opening a crafted media file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program...
Nokia Multimedia Player 1.1 '.m3u' File Heap Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33586/info Nokia Multimedia Player is prone to a heap-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Successfully exploiting this issue may allow remote...
Nokia Multimedia Player 1.1 Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/36215/info Nokia Multimedia Player is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the affected application to stop responding, denying service to legitimate users. This...
VLC Player 2.0.8 (.m3u) - Local Crash PoC
No description provided by source. Exploit Title: VLC Player 2.0.8 = Local Crash PoC Vendor URI: http://www.videolan.org/vlc/ Vendor Description: VLC is a free and open source cross-platform multimedia player and framework that plays most multimedia files as well as DVD, Audio CD, VCD, and variou...
Nokia Multimedia Player 1.0 SEH Unicode Exploit
No description provided by source. ? Exploit Title: Nokia Multimedia player SEH Unicode Date: January 11 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://www.brothersoft.com/nokia-multimedia-player-download-46238.html Version: 1.00.55.5010 Tested on: Windows xp sp3 running on VMwa...
USN-2244-1: Libav vulnerability
It was discovered that Libav incorrectly handled certain malformed media files. If a user were tricked into opening a crafted media file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program...
Apple QuickTime STSD JPEG Atom Heap Corruption - Ver2 (CVE-2009-0007)
Apple's QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous audio/video formats. There exists a heap buffer memory corruption vulnerability in Apple QuickTime. The vulnerability is due to lack...
USN-2103-1: Libav vulnerabilities
It was discovered that Libav incorrectly handled certain malformed media files. If a user were tricked into opening a crafted media file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program...
Debian Security Advisory DSA 2471-1 (ffmpeg - several vulnerabilities)
Several vulnerabilities have been discovered in FFmpeg, a multimedia player, server and encoder. Multiple input validations in the decoders/ demuxers for Westwood Studios VQA, Apple MJPEG-B, Theora, Matroska, Vorbis, Sony ATRAC3, DV, NSV, files could lead to the execution of arbitrary code. These...
Debian: Security Advisory (DSA-2471-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
VLC Player 2.0.8 (.m3u) - Local Crash PoC
VLC Player is prone to a remote denial-of-service vulnerability. Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed exploit attempts may result in a denial-of-service condition. VLC Player 2.0.8 is vulnerable; other versions may also be affected...
VideoLAN VLC Media Player 2.0.8 - .m3u Local Crash (PoC)
VideoLAN VLC Media Player 2.0.8 - .m3u Local Crash PoC Exploit Title: VLC Player 2.0.8 ", "inj3ct0rs...
VideoLAN VLC Media Player 2.0.8 - '.m3u' Local Crash (PoC)
Exploit Title: VLC Player 2.0.8 ", "inj3ct0rs.m3u"; print file $PoC; print "\n + File successfully created!\n" or d...
Apple QuickTime 'enof' atoms处理缓冲区溢出漏洞
Bugtraq ID:60086 CVE ID:CVE-2013-0986 Apple QuickTime是一款拥有强大的多媒体技术的内置媒体播放器。 Apple QuickTime处理包含特制'enof' atoms的电影文件时存在一个缓冲区溢出漏洞，允许远程攻击者利用漏洞构建恶意文件，诱使用户解析，可以应用程序上下文执行任意代码。 0 Apple QuickTime 7.7.4 厂商解决方案 Apple QuickTime 7.7.4已经修复此漏洞，建议用户下载更新： http://www.apple.com...
Debian DSA-2624-1 : ffmpeg - several vulnerabilities
Several vulnerabilities have been discovered in FFmpeg, a multimedia player, server and encoder. Multiple input validations in the decoders/demuxers for Shorten, Chinese AVS video, VP5, VP6, AVI, AVS and MPEG-1/2 files could lead to the execution of arbitrary code. Most of these issues were...
[SECURITY] [DSA 2624-1] ffmpeg security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2624-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 16, 2013 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 2624-1 (ffmpeg - several vulnerabilities)
Several vulnerabilities have been discovered in FFmpeg, a multimedia player, server and encoder. Multiple input validations in the decoders/demuxers for Shorten, Chinese AVS video, VP5, VP6, AVI, AVS and MPEG-1/2 files could lead to the execution of arbitrary code. Most of these issues were...
