1113 matches found
Teradek Slice 7.3.15 CSRF Change Password Exploit
Summary Built on the award-winning Cube platform, Slice is a rack mount HEVC / H.264 codec designed to fit seamlessly into your broadcast studio. Like the Cube, Slice encoders and decoders includes 3G-SDI and HDMI I/O, Ethernet and WiFi connectivity, and full duplex IFB. Description The applicati...
Teradek Slice 7.3.15 (snapshot.cgi) Stream Disclosure
Summary Built on the award-winning Cube platform, Slice is a rack mount HEVC / H.264 codec designed to fit seamlessly into your broadcast studio. Like the Cube, Slice encoders and decoders includes 3G-SDI and HDMI I/O, Ethernet and WiFi connectivity, and full duplex IFB. Description Slice suffers...
Teradek Slice 7.3.15 - Cross-Site Request Forgery
Teradek Slice 7.3.15 - Cross-Site Request Forgery...
Teradek Slice 7.3.15 - Cross-Site Request Forgery
...
UBUNTU-CVE-2018-6392
The filterslice function in libavfilter/vftranspose.c in FFmpeg through 3.4.1 allows remote attackers to cause a denial of service out-of-array access via a crafted MP4 file...
PT-2018-17527
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 3.4.2 Description The issue allows remote attackers to cause a denial of service via a crafted MP4 file. This is due to an out-of-array access in the filter slice function. Recommendations For versions prior to 3.4.2,...
CVE-2017-13197
In the ihevcdparseslice.c function, slave threads are not joined if there is an error. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1...
CVE-2017-13192
In the ihevcdparsesliceheader function of ihevcdparsesliceheader.c a slice address of zero after the first slice could result in an infinite loop. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not...
PT-2018-3081
Name of the Vulnerable Software and Affected Versions Android versions 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 Description The issue is related to the ihevcd parse slice header function in ihevcd parse slice header.c, where a slice address of zero after the first slice could result in an...
Libav h264_slice_init function denial of service vulnerability
Libav is an open source audio and video processing tools , providing for conversion , manipulation and streaming of various multimedia formats and protocols cross-platform tools and libraries . A denial of service vulnerability exists in the h264sliceinit function in libavcodec/h264slice.c in Lib...
CVE-2017-17128
The h264sliceinit function in libavcodec/h264slice.c in Libav 12.2 allows remote attackers to cause a denial of service segmentation fault and application crash via a crafted file...
CVE-2017-17128
The h264sliceinit function in libavcodec/h264slice.c in Libav 12.2 allows remote attackers to cause a denial of service segmentation fault and application crash via a crafted file...
PT-2017-14722
Name of the Vulnerable Software and Affected Versions Libav version 12.2 Description The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault and application crash, via a crafted file. This is due to a problem in the h264 slice init function. Recommendatio...
Cisco Small Business SPA300, SPA500 and SPA51x Denial of Service Vulnerabilities
The Cisco Small Business SPA300, SPA500, and SPA51x are all S-series IP phone products from Cisco. A denial of service vulnerability exists in the processing of IP slices in the Cisco Small Business SPA300, SPA500, and SPA51x series of IP phones, which stems from the program's failure to handle...
gstreamer: Out of bounds heap read in windows_icon_typefind
The windowsicontypefind function in gst-plugins-base in GStreamer before 1.10.2, when GSLICE is set to always-malloc, allows remote attackers to cause a denial of service out-of-bounds read via a crafted ico file...
PT-2017-2355
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2017-03-05 Description The issue is caused by a heap-based buffer overflow related to the ff h264 slice context init function in libavcodec/h264dec.c. This can lead to an out-of-bounds write. The vulnerability may allo...
Important: Red Hat Security Advisory: ansible and gdeploy security and bug fix update
An update for ansible and gdeploy is now available for Red Hat Gluster Storage 3.1 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
Denial Of Service (DoS)
FFmpeg is vulnerable to denial of service DoS attacks. These attacks are possible because FFmpeg does not check for a zero value of a slice height in utvideodec.c. This leads to an out-of-bounds array access through Ut Video data...
UBUNTU-CVE-2016-3741
The H.264 decoder in mediaserver in Android 6.x before 2016-07-01 does not initialize certain slice data, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 28165661...
MS15-1 0 6 JavaScript ArrayBuffer. slice any address read-vulnerability analysis-vulnerability warning-the black bar safety net
2 0 1 5 year 8 month 1 3 day, Microsoft released the Update Patch security bulletin MS15-1 0 6, which contains the About Internet Explorer multiple vulnerabilities. Before, we have explained how to attack the VBScript engine inside the Filter function in the presence of type confusion...