Lucene search
+L

3026 matches found

BDU FSTEC
BDU FSTEC
added 2022/01/26 12:0 a.m.10 views

The vulnerability of the professional video editing software Adobe Premiere Pro, related to the use of memory after it is released, allows attackers to enhance their privileges and gain unauthorized access to protected information.

The vulnerability of the professional video editing software Adobe Premiere Pro lies in the use of memory after it is released. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain unauthorized access to protected information through a specially created MOV fil...

4.3CVSS5.5AI score0.003EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/05/18 12:0 a.m.72 views

openSUSE Security Update : perl-Image-ExifTool (openSUSE-2021-707)

This update for perl-Image-ExifTool fixes the following issues : Update to version 12.25 fixes boo1185547 CVE-2021-22204 - JPEG XL support is now official - Added read support for Medical Research Council MRC image files - Added ability to write a number of 3gp tags in video files - Added a new...

7.8CVSS7.7AI score0.99982EPSS
SaveExploits39References2
Check Point Advisories
Check Point Advisories
added 2021/04/21 12:0 a.m.23 views

Apple Quicktime Remote Code Execution (CVE-2015-3788)

A remote code execution vulnerability exists in Apple Quicktime. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

6.8CVSS9.4AI score0.0364EPSS
SaveExploits0
Fedora
Fedora
added 2021/04/06 1:4 a.m.40 views

[SECURITY] Fedora 33 Update: mediainfo-21.03-1.fc33

MediaInfo CLI Command Line Interface. What information can I get from MediaInfo? General: title, author, director, album, track number, date, duration... Video: codec, aspect, fps, bitrate... Audio: codec, sample rate, channels, language, bitrate... Text: language of subtitle Chapters: number of...

7.5CVSS3.2AI score0.04238EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
added 2021/03/01 12:0 a.m.23 views

Apple Quicktime Remote Code Execution (CVE-2015-7088)

A remote code execution vulnerability exists in Apple Quicktime. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

6.8CVSS7.2AI score0.01691EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
added 2021/03/01 12:0 a.m.22 views

Apple Quicktime Remote Code Execution (CVE-2015-7089)

A remote code execution vulnerability exists in Apple Quicktime. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

6.8CVSS5.5AI score0.01648EPSS
SaveExploits0
VulnCheck KEV
VulnCheck KEV
added 2020/12/01 12:0 a.m.4 views

VulnCheck KEV: CVE-2003-0050

parsexml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via shell metacharacters...

7.5CVSS6.2AI score0.68858EPSS
SaveExploits3References1
Zero Day Initiative
Zero Day Initiative
added 2020/08/14 12:0 a.m.48 views

Microsoft Windows QuickTime Video Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

8.8CVSS7AI score0.03463EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/07/09 12:0 a.m.32 views

VLC < 2.2.4 DoS

The version of VLC media player installed on the remote host with version prior to 2.2.4, is affected by a denial of service vulnerability. A buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN allows remote attackers to cause a denial of service crash or possibl...

9.8CVSS8AI score0.24748EPSS
SaveExploits2References2
Talos Blog
Talos Blog
added 2020/04/14 11:24 a.m.30 views

Vulnerability Spotlight: Information disclosure vulnerability in Microsoft Media Foundation

Marcin “Icewall” Noga of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. Microsoft Media Foundation contains an information disclosure vulnerability that could allow an attacker to eventually remotely execute code on the victim machine. Media Foundation is a COM-based multimedia...

2.5AI score
SaveExploits0
Talos
Talos
added 2020/04/14 12:0 a.m.59 views

Microsoft Media Foundation CQTMetadataKeysAtom GetKeyForIndex Information Disclosure Vulnerability

Summary An exploitable code execution vulnerability exists in the CQTMetadataKeysAtom GetKeyForIndex functionality of Microsoft Corporation Microsoft Media Foundation 10.0.18362.476. A specially crafted malformed file can cause code execution resulting in remote code execution. An attacker can...

5.5CVSS6AI score0.0845EPSS
SaveExploits0
Veracode
Veracode
added 2020/04/10 12:31 a.m.27 views

Arbitrary Code Execution

gstreamer-plugins-good is vulnerable to arbitrary code execution. The vulnerability exists through multiple heap buffer overflows and an array indexing error were found in the GStreamer's QuickTime media file format decoding plugin. An attacker could create a carefully-crafted QuickTime media .mo...

9.3CVSS3.4AI score0.07206EPSS
SaveExploits1References24Affected Software1
Veracode
Veracode
added 2020/04/10 12:31 a.m.25 views

Arbitrary Code Execution

gstreamer-plugins-good is vulnerable to arbitrary code execution. The vulnerability exists as multiple heap buffer overflows and an array indexing error were found in the GStreamer's QuickTime media file format decoding plugin. An attacker could create a carefully-crafted QuickTime media .mov fil...

9.3CVSS3.4AI score0.06483EPSS
SaveExploits1References20Affected Software1
Veracode
Veracode
added 2020/04/10 12:31 a.m.25 views

Arbitrary Code Execution

gstreamer-plugins-good is vulnerable to arbitrary code execution. The vulnerability exists as multiple heap buffer overflows and an array indexing error were found in the GStreamer's QuickTime media file format decoding plugin. An attacker could create a carefully-crafted QuickTime media .mov fil...

9.3CVSS3.4AI score0.07147EPSS
SaveExploits1References20Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:0 a.m.7 views

The vulnerability of the Media Foundation component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Media Foundation component in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created QuickTime file...

7.3CVSS7.6AI score0.12956EPSS
SaveExploits0References3
CNVD
CNVD
added 2019/11/14 12:0 a.m.6 views

Microsoft Windows Resource Management Error Vulnerability

Microsoft Windows is a set of operating systems used for personal devices.Microsoft Windows Server is a set of server operating systems. A remote code execution vulnerability exists in Microsoft Windows Media Foundation because the program fails to properly analyze specially crafted QuickTime med...

9.3CVSS7.8AI score0.12956EPSS
SaveExploits0References1
OSV
OSV
added 2019/11/12 7:15 p.m.8 views

CVE-2019-1430

A remote code execution vulnerability exists when Windows Media Foundation improperly parses specially crafted QuickTime media files.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'Microsoft Windows Media Foundation Remote Code...

7.8CVSS7.7AI score0.12956EPSS
SaveExploits0References1
Prion
Prion
added 2019/11/12 7:15 p.m.14 views

Remote code execution

A remote code execution vulnerability exists when Windows Media Foundation improperly parses specially crafted QuickTime media files.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'Microsoft Windows Media Foundation Remote Code...

9.3CVSS8.1AI score0.12956EPSS
SaveExploits0References1Affected Software2
CVE
CVE
added 2019/11/12 6:53 p.m.117 views

CVE-2019-1430

CVE-2019-1430 affects Windows Media Foundation. Root cause: improper parsing of specially crafted QuickTime files, enabling remote code execution with the caller’s privileges when a user opens the tainted file. Public exploits exist; attacker must lure the user to open the QuickTime content. Miti...

9.3CVSS8AI score0.12956EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2019/11/12 6:53 p.m.29 views

CVE-2019-1430

A remote code execution vulnerability exists when Windows Media Foundation improperly parses specially crafted QuickTime media files.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'Microsoft Windows Media Foundation Remote Code...

8.1AI score0.12956EPSS
SaveExploits0References1
Rows per page
Query Builder