[SECURITY] [DSA 3833-1] libav security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3833-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 24, 2017 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3833-1 (libav - security update)

Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. A full list of the changes is available at https://git.libav.org/?p=libav.git;a=blob;f=Changelog;hb=refs/tags/v11.9 OpenVAS Vulnerability Test $Id: deb3833.nasl 6607 2017-07-07 12:04:25Z...

The vulnerability of the iOS operating system, the Safari browser, and the iTunes multimedia player allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component of the iOS operating system, Safari browser, and iTunes multimedia player is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption,...

The vulnerabilities of the Safari browser, the multimedia player iTunes, and the operating system iOS allow attackers to trigger service interruptions or execute arbitrary codes.

The vulnerability of the WebKit component in the Safari browser, the iTunes multimedia player, and the iOS operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a servic...

The vulnerability of Safari browser, the iOS operating system, and the multimedia player iTunes allows attackers to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component in the Safari browser and the iOS operating system, as well as in the multimedia player iTunes, arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or...

THN Deal: Complete Linux Certification Training (Save 97%)

If you are also searching for the answers to what skills are needed for a job in cyber security, you should know that this varies widely based upon the responsibilities of a particular role, the type of company you want to work with, and especially on it’s IT architect. However, Linux is the most...

Joomla Music Collection 3.0.3 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla Component Music Collection 3.0.3 - SQL Injection Home : https://extensions.joomla.org/extensions/extension/multimedia/multimedia-players/music-collection/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM...

Joomla JE Awd Song 1.8 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component JE Awd Song 1.8 - SQL Injection Google Dork: inurl:index.php?option=comjeawdsong Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

[ASA-201702-10] ffmpeg: arbitrary code execution

Arch Linux Security Advisory ASA-201702-10 ========================================== Severity: Critical Date : 2017-02-12 CVE-ID : CVE-2017-5024 CVE-2017-5025 Package : ffmpeg Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-172 Summary ======= The package...

DEBIAN-CVE-2016-10191

Heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check for RTMP packet size mismatches...

Cisco cBR Series Converged Broadband Routers List Headers Denial of Service Vulnerability

A vulnerability in the handling of list headers in Cisco cBR Series Converged Broadband Routers could allow an unauthenticated, remote attacker to cause the device to reload, resulting in a denial of service DoS condition. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be...

Cisco cBR Series Converged Broadband Routers List Headers Denial of Service Vulnerability

A vulnerability in the handling of list headers in Cisco cBR Series Converged Broadband Routers could allow an unauthenticated, remote attacker to cause the device to reload, resulting in a denial of service DoS condition. The vulnerability is due to memory corruption. An attacker could exploit...

Libbpg BGP image decoding Code Execution Vulnerability

Summary An exploitable heap write out of bounds vulnerability exists in the decoding of BPG images in libbpg library. A crafted BPG image decoded by libbpg can cause an integer underflow vulnerability causing an out of bounds heap write leading to remote code execution. This vulnerability can be...

Facebook, Researcher at Odds Over Messenger Issue

Facebook is dismissing claims by a researcher who says multimedia content such as audio-based messages sent via its Facebook Messenger service can be intercepted by a third-party under certain conditions. On Tuesday, Mohamed Baset, a security analyst at ecommerce firm Linio México, published a...

MS12-004: Description of the security update for Windows Multimedia Library for Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008: January 10, 2012

MS12-004: Description of the security update for Windows Multimedia Library for Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008: January 10, 2012 INTRODUCTION Microsoft has released security bulletin MS12-004. To view the complete security bulletin, visit one of the...

CVE-2016-7502

The cavsidct8addc function in libavcodec/cavsdsp.c in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when decoding with cavsdecode...

AVCON6 multimedia communication systems download. the action parameter filename arbitrary File Download vulnerability

No description provided by source...

Ubuntu system actually exists Nintendo red and white game machine vulnerability-vulnerability warning-the black bar safety net

Recently security researchers Evans in the Ubuntu system found a very interesting vulnerability, this vulnerability also with Nintendo the year of the 8-bit consoles（NES, or FC. Evans said that in Ubuntu 12.04.5 version of the multimedia framework in the presence of a vulnerability, the...

AMX Multiple Products Credential Management Vulnerabilities (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-16-049-02 AMX Multiple Products Credential Management Vulnerabilities that was published February 18, 2016, on the NCCIC/ICS-CERT web site. --------- Begin Update A Part 1 of 2 -------- ICS-CERT has become aware of...

Updated freeimage packages fix security vulnerability

Multiple vulnerabilities were discovered in the FreeImage multimedia library, which might result in denial of service or the execution of arbitrary code if a malformed XMP or RAW image is processed. CVE-2015-3885, CVE-2016-5684...