Security Bulletin: A vulnerability in the Firefox component of the Synthetic Playback agent affects IBM Performance Management products.

Summary Multiple browsers could allow a remote attacker to obtain sensitive information, caused by the failure to consider the role of the TCP congestion window in providing information about content length by the HTTPS protocol or by the HTTP/2 protocol. By visiting a Web site owned by a malicio...

Code Execution Vulnerability in Yuvision EZPlayer Video Player

ZPlayer Video Player is a video player software by Yuvision. Yuvision EZPlayer Video Player has a code execution vulnerability when playing video. An attacker can exploit the vulnerability to execute arbitrary code...

heinekingmedia StashCat for Android, Web and Desktop Man-in-the-Middle Attack Vulnerability

heinekingmedia StashCat for Android, Web and Desktop are all products of the German company heinekingmedia. heinekingmedia StashCat for Android is an Android-based enterprise communication software. heinekingmedia StashCat for Web is the web-based version and heinekingmedia StashCat for Desktop i...

DEBIAN-CVE-2017-2906

An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation suite version 2.78c. A specially created '.avi' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

DEBIAN-CVE-2017-2907

An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation suite version 2.78c. A specially created '.avi' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

UBUNTU-CVE-2017-2906

An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation suite version 2.78c. A specially created '.avi' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

Tencent Video suffers from memory out-of-bounds access vulnerability

Tencent Video is Tencent's video playback product, positioned as China's largest online video media platform, supporting online viewing, offline caching to watch videos and watch local videos. A memory out-of-bounds access vulnerability exists in Tencent Video when handling certain mp4 format...

Skyworth smart TVs have smart hardware vulnerabilities

Skyworth Group Limited is a publicly listed technology company specializing in the production of consumer electronics, networking and communication products. A smart hardware vulnerability exists in Skyworth Smart TV. The vulnerability is due to Skyworth Smart TV's failure to restrict permissions...

Vulnerability Spotlight: Multiple Simple DirectMedia Layer Vulnerabilities

Discovered by Lilith Wyatt of Cisco Talos Overview Talos is disclosing several vulnerabilities identified in Simple DirectMedia Layer's SDL2Image library that could allow code execution. Simple DirectMedia Layer is a cross-platform development library designed to provide low level access to audio...

GLSA-201803-04 : Newsbeuter: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201803-04 Newsbeuter: User-assisted execution of arbitrary code Newsbeuter does not properly escape shell meta-characters in an RSS item with a media enclosure in the podcast playback function of Podbeuter. Impact : A remote...

Zhejiang Dahua Playback Library SDK suffers from out-of-bounds access vulnerability (CNVD-2018-01917)

Playback Library SDK is a development kit based on Dahua's private code stream encapsulation protocol developed to serve network DVRs, network video servers, network cameras, network dome cameras, intelligent devices and other products. An out-of-bounds access vulnerability exists in dhplay.dll i...

Zhejiang Dahua Playback Library SDK suffers from out-of-bounds access vulnerability (CNVD-2018-01920)

Playback Library SDK is a development kit based on Dahua's private code stream encapsulation protocol developed to serve network DVRs, network video servers, network cameras, network dome cameras, intelligent devices and other products. An out-of-bounds access vulnerability exists in dhplay.dll i...

Zhejiang Dahua Playback Library SDK suffers from out-of-bounds access vulnerability (CNVD-2018-01923)

Playback Library SDK is a development kit based on Dahua's private code stream encapsulation protocol developed to serve network DVRs, network video servers, network cameras, network dome cameras, intelligent devices and other products. An out-of-bounds access vulnerability exists in dhplay.dll i...

Zhejiang Dahua Playback Library SDK suffers from out-of-bounds access vulnerability (CNVD-2018-01921)

Playback Library SDK is a development kit based on Dahua's private code stream encapsulation protocol developed to serve network DVRs, network video servers, network cameras, network dome cameras, intelligent devices and other products. An out-of-bounds access vulnerability exists in mpeg4dec.dll...

Memory Corruption Vulnerability in Zhejiang Dahua Playback Library SDK

Playback Library SDK is a development kit based on Dahua's private code stream encapsulation protocol developed to serve network DVRs, network video servers, network cameras, network dome cameras, intelligent devices and other products. A memory corruption vulnerability exists in dhplay.dll in th...

Denial of Service Vulnerability in Zhejiang Dahua Playback Library SDK (CNVD-2018-01922)

Playback Library SDK is a development kit based on Dahua's private code stream encapsulation protocol developed to serve network DVRs, network video servers, network cameras, network dome cameras, intelligent devices and other products. A denial-of-service vulnerability exists in dhplay.dll in th...

Zhejiang Dahua Playback Library SDK suffers from out-of-bounds access vulnerability (CNVD-2018-01924)

Playback Library SDK is a development kit based on Dahua's private code stream encapsulation protocol developed to serve network DVRs, network video servers, network cameras, network dome cameras, intelligent devices and other products. An out-of-bounds access vulnerability exists in mpeg4dec.dll...

Zhejiang Dahua Playback Library SDK suffers from out-of-bounds access vulnerability (CNVD-2018-01919)

Playback Library SDK is a development kit based on Dahua's private code stream encapsulation protocol developed to serve network DVRs, network video servers, network cameras, network dome cameras, intelligent devices and other products. An out-of-bounds access vulnerability exists in mpeg4dec.dll...

Zhejiang Dahua Playback Library SDK suffers from an out-of-bounds access vulnerability

Playback Library SDK is a development kit based on Dahua's private code stream encapsulation protocol developed to serve network DVRs, network video servers, network cameras, network dome cameras, intelligent devices and other products. An out-of-bounds access vulnerability exists in mpeg4dec.dll...

Denial of Service Vulnerability in Zhejiang Dahua Playback Library SDK

Playback Library SDK is a development kit based on Dahua's private code stream encapsulation protocol developed to serve network DVRs, network video servers, network cameras, network dome cameras, intelligent devices and other products. A denial-of-service vulnerability exists in dhplay.dll in th...