CVE-2011-3940

nsvdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service out-of-bounds read and write via a crafted NSV file that triggers "us...

Ubuntu 11.04 / 11.10 / 12.04 LTS : libav vulnerabilities (USN-1478-1)

Mateusz Jurczyk and Gynvael Coldwind discovered that Libav incorrectly handled certain malformed DV files. If a user were tricked into opening a crafted DV file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user...

USN-1478-1: Libav vulnerabilities

Mateusz Jurczyk and Gynvael Coldwind discovered that Libav incorrectly handled certain malformed DV files. If a user were tricked into opening a crafted DV file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user...

ffmpeg library multiple security vulnerabilities

Multiple security vulnerabilities on Westwood Studios VQA, Apple MJPEG-B, Theora, Matroska, Vorbis, Sony ATRAC3, DV, NSV parsing...

CVE-2011-3940

nsvdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service out-of-bounds read and write via a crafted NSV file that triggers "us...

VideoLAN VLC Media Player 1.1.11 - .NSV File Denial of Service

VideoLAN VLC Media Player 1.1.11 - .NSV File Denial of Service // source: https://www.securityfocus.com/bid/64623/info VLC Media Player is prone to a denial-of-service vulnerability. Successful exploits may allow attackers to crash the affected application, denying service to legitimate users. VL...

Winamp 5.622多个远程安全漏洞

BUGTRAQ ID: 50387 Winamp是流行的通用音乐播放器。 Winamp 5.622在实现上存在多个远程漏洞，远程攻击者可利用这些漏洞执行任意代码或造成拒绝服务。 1在处理Creative Music Format CMF标头中的"iOffsetMusic"值时，inmidi.dll插件中存在错误，可被利用通过特制的MIDI文件造成堆缓冲区溢出。 2）在处理Advanced Module Format AMF标头中的"channels"值时，inmod.dl插件中存在错误，可被利用通过特制的".amf"文件造成堆缓冲区溢出。 3）在处理Nullsoft Streaming...

Winamp 5.6存在多个安全漏洞

Bugtraq ID: 48457 Winamp是一款流行的媒体播放器。 Winamp存在多个安全漏洞，允许攻击者执行任意代码或使应用程序崩溃。 -当解析On2 TrueMotion VP6 codec编码的媒体文件时vp6.w5s存在错误，如果构建的FLV媒体文件中"version"字段超过8，可触发内存破坏。 -解析H263视频内容中"CustomWidth"和"CustomHeight"字段时存在错误，构建特制FLV文件可触发内存破坏。 -解压缩帧时nsvdecvp5.dll存在错误，构建特制的NSV文件可触发基于堆的缓冲区溢出。...

VLC Media Player AMV and NSV Data Processing Memory Corruption Vulnerability - Windows

VLC Media Player is prone to a memory corruption vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VLC Media Player ".AMV"和".NSV"多个远程缓冲区溢出漏洞

BUGTRAQ ID: 47012 CVE ID: CVE-2010-3275,CVE-2010-3276 VLC多媒体播放器具有跨平台的特性，它有Linux、Microsoft Windows、Mac OS X、BeOS、BSD、Pocket PC及Solaris的版本。 VLC多媒体播放器在处理".AMV"和".NSV"文件格式时，在实现上存在多个远程缓冲区溢出漏洞，远程攻击者可利用这些漏洞在实用性应用程序中执行任意代码或使应用程序崩溃，拒绝服务合法用户。 VideoLAN VLC Media Player 1.x 厂商补丁： VideoLAN --------...

CVE-2010-3276

libdirectxplugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an NSV file...

DEBIAN-CVE-2010-3276

libdirectxplugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an NSV file...

CVE-2010-3276

libdirectxplugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an NSV file...

Code injection

libdirectxplugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an NSV file...

CVE-2010-3276

libdirectxplugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an NSV file...

CVE-2010-3276

VLC Media Player before 1.1.8 is affected by CVE-2010-3276 via a crafted width in NSV files that exploits libdirectx_plugin.dll to allow remote arbitrary code execution. Affected component: VLC’s NSV handling in libdirectx_plugin.dll; root cause: improper parsing of NSV width data leading to code...

EUVD-2010-3275

libdirectxplugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an NSV file...

CVE-2010-3276

libdirectxplugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an NSV file...

CVE-2010-3276

libdirectxplugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an NSV file...

VideoLAN VLC Media Player 1.1.4 - 'AMV' Dangling Pointer (Metasploit)

$Id: vlcamv.rb 12140 2011-03-26 00:07:36Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...