AMX Multiple Products Credential Management Vulnerabilities (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-16-049-02 AMX Multiple Products Credential Management Vulnerabilities that was published February 18, 2016, on the NCCIC/ICS-CERT web site. --------- Begin Update A Part 1 of 2 -------- ICS-CERT has become aware of...

UBUNTU-CVE-2016-2328

libswscale/swscaleunscaled.c in FFmpeg before 2.8.6 does not validate certain height values, which allows remote attackers to cause a denial of service out-of-bounds array read access or possibly have unspecified other impact via a crafted .cine file, related to the bayertorgb24wrapper and...

The vulnerability of the microprogramming software of the Harman AMX multimedia stream management system allows a intruder to gain access to protected information.

The vulnerability of the setUpSubtleUserAccount/bin/bw function in the Harman AMX multimedia stream management software exists due to the rigid encoding of registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected information...

Harman AMX multimedia devices contain hard-coded credentials

Overview Multiple models of Harman AMX multimedia devices contain a hard-coded debug account. Description CWE-798: Use of Hard-coded Credentials - CVE-2015-8362According to the researchers' blog post, several models of Harman AMX multimedia devices contain a hard-coded "backdoor" account with...

[SECURITY] Fedora 22 Update: pitivi-0.94-5.fc22

Pitivi is an application using the GStreamer multimedia framework to manipulate a large set of multimedia sources. At this level of development it can be compared to a classic video editing program...

CVE-2015-8672

The presentation transmission permission management mechanism in Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before V100R001C10SPC100 allows remote attackers to cause a denial of service wired presentation outage via unspecified vectors involving a...

Design/Logic Flaw

Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before V100R001C10SPC100 do not require entry of the old password when changing the password for the Debug account, which allows physically proximate attackers to change the password by leveraging an unattende...

Design/Logic Flaw

The presentation transmission permission management mechanism in Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before V100R001C10SPC100 allows remote attackers to cause a denial of service wired presentation outage via unspecified vectors involving a...

CVE-2015-8672

The presentation transmission permission management mechanism in Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before V100R001C10SPC100 allows remote attackers to cause a denial of service wired presentation outage via unspecified vectors involving a...

GStreamer: User-assisted execution of arbitrary code

Background GStreamer is an open source multimedia framework. Description A buffer overflow vulnerability has been found in the parsing of H.264 formatted video. Impact A remote attacker could entice a user to open a specially crafted H.264 formatted video using an application linked against...

The vulnerability of the FFmpeg multimedia library, which allows a hacker to trigger a service failure

The vulnerability in the decodeuncompressed function in the libavcodec/faxcompr.c multimedia library of FFmpeg exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by using specially crafted CCITT FAX data...

milb.com XSS vulnerability

Vulnerable URL: http://www.milb.com/multimedia/vpp.jsp?contentid=451545283="';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13834 Google Pagerank| 6 VIP website status:| Yes...

Security Advisory - Two Vulnerabilities in Huawei TE Series Product

Huawei TE series is a multimedia video conferencing endpoint that transfers audio, video, and desktop resources based on IP networks. It offers point-to-point and multiparty conferences for attendees at different places to enjoy face-to-face audio/video communication experience. A security...

The vulnerability of the Android operating system, which allows a hacker to execute arbitrary code or cause a service failure

The vulnerability of the Android operating system’s mediaserver component is caused by a buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure using a specially created multimedia file...

The vulnerability of the Android operating system, which allows a hacker to execute arbitrary code or cause a service failure

The vulnerability of the Android operating system’s mediaserver component is due to a buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure by using a specially created multimedia file...

Google Android Skia Denial of Service Vulnerability

Google Skia is the United States Google Google company's an open source and C + + based graphics library , it can be used in Mozilla Firefox, Google Chrome and other browsers , but also available in the Android open mobile platform . A security vulnerability exists in Google Skia used in Android...

How to Auto-BackUp Your WhatsApp Data to Google Drive with Encryption

What if your phone suddenly slips into a bathtub? Maybe you'll end up losing all your important data, more specifically, your WhatsApp photos, videos, Voice Notes and Chat Data that flows through your chats. Sounds scary, isn't it? But, now you need not worry if your phone suddenly died or broke ...

[SECURITY] Fedora 21 Update: freeimage-3.10.0-23.fc21

FreeImage is a library for developers who would like to support popular graphics image formats like PNG, BMP, JPEG, TIFF and others as needed by today's multimedia applications...

[SECURITY] Fedora 22 Update: freeimage-3.10.0-23.fc22

FreeImage is a library for developers who would like to support popular graphics image formats like PNG, BMP, JPEG, TIFF and others as needed by today's multimedia applications...

Stagefright Bug 2.0 — One Billion Android SmartPhones Vulnerable to Hacking

Attention Android users! More than 1 Billion Android devices are vulnerable to hackers once again – Thanks to newly disclosed two new Android Stagefright vulnerabilities. Yes, Android Stagefright bug is Back… …and this time, the flaw allows an attacker to hack Android smartphones just by tricking...