163 matches found
CVE-2010-1445
VLC Media Player before 1.0.6 is affected by CVE-2010-1445, a heap-based buffer overflow in the RTMP handling that can be exploited by a crafted byte stream to cause a denial of service or potentially execute arbitrary code. The vulnerability is remote and unauthenticated (network attack vector) ...
CVE-2010-1445
Heap-based buffer overflow in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted byte stream in an RTMP session...
X (Formerly Twitter): XSS platform.twitter.com | video-js metadata
https://platform.twitter.com/video/video-js.1e43b81a2f30220a16fd493aaf072451.swf VideoJS does not escape metadata passed to JavaScript via ExternalInterface. Since VideoJS does not load a required policy file to read metadata from mp3s loaded from an external server via http we need to use rtmp...
Flussonic Media Server 4.1.25 - 4.3.3 - Aribtrary File Disclosure
No description provided by source. Document Title: ============ Flussonic Media Server 4.3.3 Multiple Vulnerabilities Release Date: =========== June 29, 2014 Product & Service Introduction: ======================== Flussonic is a mutli-protocol streaming server with support for many protocols,...
Flussonic Media Server 4.1.25 < 4.3.3 - Arbitrary File Disclosure
Document Title: ============ Flussonic Media Server 4.3.3 Multiple Vulnerabilities Release Date: =========== June 29, 2014 Product & Service Introduction: ======================== Flussonic is a mutli-protocol streaming server with support for many protocols, including HDS, HLS, RTMP, RTSP, HTTP,...
Ezhometech EzServer 7.0 - Remote Heap Corruption Vulnerability
No description provided by source. Title: Ezhometech EzServer 7.0 Remote Heap Corruption Vulnerability Description: EzServer is a software for audio and video streaming adopted by various companies worldwide. Version 7.0 is affected by a remote heap corruption vulnerability. Version 6.x is not...
RTMP Connection Detection
Binary data 8282.prm...
RTMP Connection Detection
Binary data 8283.prm...
WowzaMediaServer SecureToken bypass (and worse)
Product: Wowza Media Server URL: http://www.wowza.com/ Description: WMS is a quite popular RTMP/HLS/HDS/RTSP streaming server Issue: By default all installations of WMS use four modules in their application's config file: base, properties, logging, flvplayback. I've found out that the properties...
WowzaMediaServer StorageDir escape (regression)
Product: Wowza Media Server URL: http://www.wowza.com/ Description: WMS is a quite popular RTMP/HLS/HDS/RTSP streaming server Issue: In early 2009 I reported problem with processing of requests with relative paths. The issue surfaced again. In a nutshell, you can escape Applications StorageDir...
WowzaMediaServer StorageDir Constraint Bypass
Product: Wowza Media Server URL: http://www.wowza.com/ Description: WMS is a quite popular RTMP/HLS/HDS/RTSP streaming server Issue: In early 2009 I reported problem with processing of requests with relative paths. The issue surfaced again. In a nutshell, you can escape Applications StorageDir...
Adobe Flash Player RTMP Code Execution (APSB13-11; CVE-2013-2555)
A code execution vulnerability has been reported in the Adobe Flash Player. The vulnerability is due to insufficient sanitization by the Adobe Flash Player when reading data from a RTMP multimedia stream. A remote attacker may exploit this issue by sending a specially crafted RTMP packet to the...
Ezhometech EzServer memory corruption
Memory corruption on RTMP AMF request parsing...
[CVE-2012-4750] Ezhometech EzServer 7.0 Remote Heap Corruption Vulnerability
Title: Ezhometech EzServer 7.0 Remote Heap Corruption Vulnerability Description: EzServer is a software for audio and video streaming adopted by various companies worldwide. Version 7.0 is affected by a remote heap corruption vulnerability. Version 6.x is not affected by this issue, as does not...
EZHomeTech EzServer 7.0 - Remote Heap Corruption
EZHomeTech EzServer 7.0 - Remote Heap Corruption Title: Ezhometech EzServer 7.0 Remote Heap Corruption Vulnerability Description: EzServer is a software for audio and video streaming adopted by various companies worldwide. Version 7.0 is affected by a remote heap corruption vulnerability. Version...
EZHomeTech EzServer 7.0 - Remote Heap Corruption
Title: Ezhometech EzServer 7.0 Remote Heap Corruption Vulnerability Description: EzServer is a software for audio and video streaming adopted by various companies worldwide. Version 7.0 is affected by a remote heap corruption vulnerability. Version 6.x is not affected by this issue, as does not...
RealityServer Web Services RTMP Server 3.1.1 build 144525.5 - Null Pointer Dereference Denial of Service
RealityServer Web Services RTMP Server 3.1.1 build 144525.5 - Null Pointer Dereference Denial of Service source: https://www.securityfocus.com/bid/48476/info RealityServer Web Services is prone to a remote denial-of-service vulnerability caused by a NULL pointer dereference. Attackers can exploit...
Reverse Engineering of Proprietary Protocols, Tools and Techniques !
Reverse Engineering of Proprietary Protocols, Tools and Techniques ! This talk is about reverse engineering a proprietary network protocol, and then creating my own implementation. The talk will cover the tools used to take binary data apart, capture the data, and techniques I use for decoding...
Adobe Flash Media Server Version Detection
Adobe Flash Media Server, a data and media server that serves applications to Flash Player, appears to be running on the remote host and is reporting its version number in HTTP headers. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid50705; scriptversion"1.8";...
VideoLAN Security Advisory 1003
Security Advisory 1003 Summary : Heap buffer overflow vulnerability in A/52, DTS and MPEG Audio decoders Invalid memory access in AVI, ASF, Matroska MKV demuxers Invalid memory access in XSPF playlist parser Invalid memory access in ZIP archive decompressor Heap buffer overflow in RTMP access Dat...