Bento4 'AP4_VisualSampleEntry::ReadFields' Stack Buffer Overflow Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability in AP4VisualSampleEntry::ReadFields in the Core/Ap4SampleEntry.cpp file in Bento4 version 1.5.0-617 stems from the program using the wrong character data type. An attacker could exploit this...

Bento4 Core/Ap4AtomSampleTable.cpp File Null Pointer Reference Vulnerability Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in the AP4AtomSampleTable::GetSample in the Core/Ap4AtomSampleTable.cpp file in Bento4 version 1.5.0-617. A remote attacker can exploit this vulnerability to cause a denial of service null...

UBUNTU-CVE-2017-14640

A NULL pointer dereference was discovered in AP4AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of service...

UBUNTU-CVE-2017-14647

A heap-based buffer overflow was discovered in AP4VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution...

MP3Gain mpglibDBL Buffer Overflow Vulnerability

MP3Gain is a MP3 file volume adjustment application. mpglibDBL is one of the MPEG file decoders. A buffer overflow vulnerability exists in the IIIdequantizesample of the layer3.c file of mpglibDBL in MP3Gain. A remote attacker could exploit this vulnerability to cause a denial of service or...

Exploit for Code Injection in Microsoft

CVE-2017-8759-Exploit-sample Running CVE-2017-8759 exploit sam...

PT-2017-13452 · Mp3Gain · Mp3Gain +1

Name of the Vulnerable Software and Affected Versions: MP3Gain version 1.5.2 Description: A buffer overflow was discovered in the III dequantize sample function in layer3.c in mpglibDBL, which is used in MP3Gain. This issue causes an out-of-bounds write, potentially leading to remote denial of...

UBUNTU-CVE-2017-14257

In the SDK in Bento4 1.5.0-616, AP4AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp contains a Read Memory Access Violation vulnerability. It is possible to exploit this vulnerability by opening a crafted .MP4 file...

The vulnerability of the Sample App component of the Android operating system from the CAF repository allows a perpetrator to gain unauthorized access to protected memory.

The vulnerability of the Sample App component of the Android operating system in the CAF repository arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected memory...

Threat Outbreak Alert RuleID30280: Email Messages Distributing Malicious Software on August 22, 2017

Medium Alert ID: 54913 First Published: 2017 August 22 13:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30280 may contain the following files: Name |...

Design/Logic Flaw

In all Qualcomm products with Android releases from CAF using the Linux kernel, a Sample App failed to check a length potentially leading to unauthorized access to secure memory...

CVE-2014-9980

In all Qualcomm products with Android releases from CAF using the Linux kernel, a Sample App failed to check a length potentially leading to unauthorized access to secure memory...

CVE-2014-9980

Technical details for CVE-2014-9980 are not publicly provided in the supplied documents. Monitor for updates.

Quali CloudShell 7.1.0.6508 (Patch 6) - Persistent Cross-Site Scripting

Vulnerability type: Multiple Stored Cross Site Scripting Vendor: Quali Product: CloudShell Affected version: v7.1.0.6508 Patch 6 Patched version: v8 and up Credit: Benjamin Lee CVE ID: CVE-2017-9767 ========================================================== Overview Quali CloudShell v7.1.0.6508...

Threat Outbreak Alert RuleID29961: Email Messages Distributing Malicious Software on July 27, 2017

Medium Alert ID: 54603 First Published: 2017 July 27 16:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29961 may contain the following files: Name | Siz...

DEBIAN-CVE-2017-11311

soundlib/Loadpsm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a heap buffer overflow with the potential for arbitrary code execution via a crafted PSM File that triggers use of the same sample slot for two samples...

CVE-2017-11311

soundlib/Loadpsm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a heap buffer overflow with the potential for arbitrary code execution via a crafted PSM File that triggers use of the same sample slot for two samples...

CVE-2017-11311

soundlib/Loadpsm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a heap buffer overflow with the potential for arbitrary code execution via a crafted PSM File that triggers use of the same sample slot for two samples...

CVE-2017-11311

soundlib/Loadpsm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a heap buffer overflow with the potential for arbitrary code execution via a crafted PSM File that triggers use of the same sample slot for two samples...

CVE-2017-11311

soundlib/Loadpsm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a heap buffer overflow with the potential for arbitrary code execution via a crafted PSM File that triggers use of the same sample slot for two samples...