Drop support Windows Quicktime plugin from Confluence multimedia plugin

The US Govt is recommending users should uninstall Quicktime for Windows http://krebsonsecurity.com/2016/04/us-cert-to-windows-users-dump-apple-quicktime/ In order to assist users transition we need to drop support for Quicktime plugin from Multimedia plugins and use the "video" tag instead...

Adobe Flash Player Stack Buffer Overflow Vulnerability

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A stack buffer overflow vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability t...

USN-2944-1: Libav vulnerabilities

It was discovered that Libav incorrectly handled certain malformed media files. If a user were tricked into opening a crafted media file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program...

Multimedia shoppen - External URLs, WebView JavaScript enabled, WebView files access vulnerabilities

HackApp vulnerability scanner discovered that application Multimedia shoppen published at the 'play' market has multiple vulnerabilities...

Multimedia Test - ContentProvider mode not defined, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Multimedia Test published at the 'play' market has multiple vulnerabilities...

The vulnerability of the FFmpeg multimedia library, which allows a intruder to trigger a service failure or cause other effects

The vulnerability of the asfwritepacket function libavformat/asfenc.c in the FFmpeg multimedia library is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to cause a service failure, or possibly have other effects using a specially crafted PTS value contained in...

Apple QuickTime 7.7.79.80.95 - .FPX Parsing Memory Corruption (1)

Apple QuickTime 7.7.79.80.95 - .FPX Parsing Memory Corruption 1 Application: Apple Quicktime Platforms: Windows, OSX Versions: before version 7.7.79.80.95 Author: Francis Provencher of COSIG Website: http://www.protekresearchlab.com/ Twitter: @COSIG @protekresearch CVE-2016-1767 1 Introduction 2...

Security Issue with multimedia playback on Mac OSX

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-41124. panel Currently your multimedia playback method uses an older and insecure method. I had to reinstate old plugins to mak...

Security Issue with multimedia playback on Mac OSX

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFCLOUD-41124. panel Currently your multimedia playback method uses an older and insecure method. I had to reinstate old plugins to make...

Security Issue with multimedia playback on Mac OSX

Currently your multimedia playback method uses an older and insecure method. I had to reinstate old plugins to make it work, and I would like to be able to disable these plugins as soon as possible. Can you please update your code for this as outlined here: https://support.apple.com/en-au/HT20508...

[SECURITY] Fedora 23 Update: drupal6-emfield-2.7-1.fc23

This extensible module will create fields for content types that can be use d to display video, image, and audio files from various third party providers. W hen entering the content, the user will simply paste the URL or embed code from the third party, and the module will automatically determine...

The vulnerability of the FFmpeg multimedia library, which allows a intruder to trigger a service failure or cause other effects

The vulnerability in the libavcodec/tiff.c function of the FFmpeg multimedia library arises from buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure such as inability to read data outside the array bounds or have other effects by using a specially creat...

New Exploit to 'Hack Android Phones Remotely' threatens Millions of Devices

Attention Android users! Millions of Android devices are vulnerable to hackers and intelligence agencies once again – Thanks to a newly disclosed Android Stagefright Exploit. Yes, Android Stagefright vulnerability is Back… …and this time, the Stagefright exploit allows an attacker to hack Android...

Cumulative update for Windows 10 Version 1511 and Windows Server 2016 Technical Preview 4: March 8, 2016

None None...

Debian DSA-3506-1 : libav - security update

Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-3506. The text itself is...

DSA-3506-1 libav - security update

Bulletin has no description...

Debian Security Advisory DSA 3506-1 (libav - security update)

Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. OpenVAS Vulnerability Test $Id: deb3506.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from advisory DSA 3506-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks...

The vulnerability of the microprogramming software of the Harman AMX multimedia stream management system allows a intruder to gain access to protected information.

The vulnerability of the setUpSubtleUserAccount/bin/bw function in the Harman AMX multimedia stream management software is related to the existence of a strictly encrypted password for the 1MB@tMaN account. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access ...

Open Source Big Data Analytics and Visualization: Lumify

Open Source Big Data Integration, Analytics, and Visualization Lumify is an open source project big data fusion, analysis, and visualization platform designed for anyone. Its intuitive web-based interface helps users discover connections and explore relationships in their data via a suite of...

VulnCheck KEV: CVE-2011-1255

The Timed Interactive Multimedia Extensions aka HTML+TIME implementation in Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted,...