1027 matches found
CVE-2018-1000050
Sean Barrett stbvorbis version 1.12 and earlier contains a Buffer Overflow vulnerability in All vorbis decoding paths. that can result in memory corruption, denial of service, comprised execution of host program. This attack appear to be exploitable via Victim must open a specially crafted Ogg...
CVE-2018-1000050
CVE-2018-1000050 affects the stb_vorbis library (versions
CVE-2018-1000050
Sean Barrett stbvorbis version 1.12 and earlier contains a Buffer Overflow vulnerability in All vorbis decoding paths. that can result in memory corruption, denial of service, comprised execution of host program. This attack appear to be exploitable via Victim must open a specially crafted Ogg...
gstreamer/gst-discoverer: Negative-size-param in gst_buffer_fill
Project: https://anongit.freedesktop.org/git/gstreamer/gstreamer Detailed report: https://oss-fuzz.com/testcase?key=5822394796081152 Project: gstreamer Fuzzer: libFuzzergstreamergst-discoverer Fuzz target binary: gst-discoverer Job Type: libfuzzerasangstreamer Platform Id: linux Crash Type:...
[SECURITY] Fedora 27 Update: mingw-taglib-1.11.1-4.fc27
TagLib is a library for reading and editing the meta-data of several popular audio formats. Currently it supports both ID3v1 and ID3v2 for MP3 files, Ogg Vorbis comments and ID3 tags and Vorbis comments in FLAC, MPC, Speex, WavPack, TrueAudio files, as well as APE Tags...
[SECURITY] Fedora 27 Update: mingw-taglib-1.11.1-4.fc27
TagLib is a library for reading and editing the meta-data of several popular audio formats. Currently it supports both ID3v1 and ID3v2 for MP3 files, Ogg Vorbis comments and ID3 tags and Vorbis comments in FLAC, MPC, Speex, WavPack, TrueAudio files, as well as APE Tags...
Libmp3splt Denial of Service Vulnerability
Libmp3splt is a library for creating mp3splt programs. A security vulnerability exists in the plugins/ogg.c file in Libmp3splt version 0.9.2. A remote attacker can exploit this vulnerability with a specially crafted file to cause a denial of service application crash...
Memory corruption vulnerability exists in QQ Video (CNVD-2017-34292)
QQ Video is a local player from Tencent that supports movie and music files in any format. A memory corruption vulnerability exists in the MPCVideoDec module of QQ Video Player when parsing ogg files of a specific format, which can be exploited by attackers to cause a denial of service attack...
Memory corruption vulnerability exists in QQ Video (CNVD-2017-34291)
QQ Video is a local player from Tencent that supports movie and music files in any format. A memory corruption vulnerability exists in the libavcodec module of QQ Video Player when parsing certain format ogg files, which can be exploited by attackers to cause a denial of service attack...
Baidu Video has memory corruption vulnerability
Baidu Video is a new experience player newly launched by Baidu. It supports video and audio files in mainstream media formats and realizes local playback and online on-demand playback. A memory corruption vulnerability exists in the FFSplitter module of Baidu AV player when parsing special ogg...
CVE-2017-14633
An out-of-bounds read flaw was found in the way libvorbis handled processing of Ogg Vorbis format files. This flaw could potentially be used to crash an application using libvorbis by tricking the application into processing specially crafted files...
CVE-2017-14632
An invalid free flaw was found in the way libvorbis handled processing of Ogg Vorbis format files. This flaw could potentially be used to crash an application using libvorbis by tricking the application into processing specially crafted files...
DEBIAN-CVE-2017-15185
plugins/ogg.c in Libmp3splt 0.9.2 calls the libvorbis vorbisblockclear function with uninitialized data upon detection of invalid input, which allows remote attackers to cause a denial of service application crash via a crafted file...
UBUNTU-CVE-2017-15185
plugins/ogg.c in Libmp3splt 0.9.2 calls the libvorbis vorbisblockclear function with uninitialized data upon detection of invalid input, which allows remote attackers to cause a denial of service application crash via a crafted file...
[SECURITY] Fedora 25 Update: taglib-1.11.1-5.fc25
TagLib is a library for reading and editing the meta-data of several popular audio formats. Currently it supports both ID3v1 and ID3v2 for MP3 files, Ogg Vorbis comments and ID3 tags and Vorbis comments in FLAC, MPC, Speex, WavPack, TrueAudio files, as well as APE Tags...
MP3 WAV to CD Burner 1.4.24 - Buffer Overflow (SEH) Exploit
Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: MP3 WAV to CD Burner 1.4.24 - 'Enter User Name' Field Buffer Overflow SEH Date: 24-08-2017 Exploit Author: Anurag Srivastava Website: www.pyramidcyber.com Vulnerable Software: MP3 WAV to CD Burner Vendor...
Xiph.Org libvorbis 'orbis_block_clear' function denial of service vulnerability
Xiph.Org libvorbis is an open source audio music encoding and decoding function library . A security vulnerability exists in the 'orbisblockclear' function in the lib/block.c file in Xiph.Org libvorbis version 1.3.5. A remote attacker can exploit this vulnerability to cause a denial of service nu...
libvorbis 1.3.5 - Multiple Vulnerabilities
Exploit for linux platform in category dos / poc libvorbis multiple vulnerabilities ================ Author : qflb.wu =============== Introduction: ============= The libvorbis package contains a general purpose audio and music encoding format. This is useful for creating encoding and playing...
libvorbis 1.3.5 - Multiple Vulnerabilities
libvorbis 1.3.5 - Multiple Vulnerabilities libvorbis multiple vulnerabilities ================ Author : qflb.wu =============== Introduction: ============= The libvorbis package contains a general purpose audio and music encoding format. This is useful for creating encoding and playing decoding...
