4474 matches found
Input validation
Improper file permissions in the installer for IntelR Easy Streaming Wizard before version 2.1.0731 may allow an authenticated user to potentially enable escalation of privilege via local attack...
CVE-2019-11166
Improper file permissions in the installer for IntelR Easy Streaming Wizard before version 2.1.0731 may allow an authenticated user to potentially enable escalation of privilege via local attack...
CVE-2019-11166
The CVE-2019-11166 issue affects Intel® Easy Streaming Wizard prior to version 2.1.0731. The root cause is improper file permissions in the installer, which could let an authenticated local user escalate privileges. Multiple sources (Intel advisory and vendor/press records) corroborate a local es...
SUSE-SU-2019:2345-1 Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Updated to version 2.24.4 bsc1148931. Security issues fixed: - CVE-2019-8644, CVE-2019-8649, CVE-2019-8658, CVE-2019-8669, CVE-2019-8678, CVE-2019-8680, CVE-2019-8683, CVE-2019-8684, CVE-2019-8688, CVE-2019-8595, CVE-2019-8607, CVE-2019-8615...
Intel® Easy Streaming Wizard Advisory
Summary: A potential security vulnerability in the Intel® Easy Streaming Wizard may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-11166 Description: Improper file permissions in the installer for...
VLC: Multiple vulnerabilities
Background VLC is a cross-platform media player and streaming server. Description Multiple vulnerabilities have been discovered in VLC. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known...
What the Jetflicks and iStreamItAll Takedowns Mean for Piracy
In a sweeping indictment, the feds came down hard on two unauthorized streaming services that allegedly crossed a very important line...
UBUNTU-CVE-2019-14776
A heap-based buffer over-read exists in DemuxInit in demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 via a crafted .mkv file...
Spyware App on Google Play Gets Boot, Returns Days Later
A music-streaming app offered on Google Play, harboring spyware that stole victims’ contacts, files and SMS messages, made its way onto the official Android app marketplace not once, but twice. The spyware was hidden in an app called Radio Balouch also known as RB Music. The app itself was actual...
Live555 Streaming Media < 2019.08.16 Use-After-Free Vulnerability - Linux
Live555 Streaming Media is prone to a Use-After-Free vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Live555 Streaming Media < 2019.08.16 Use-After-Free Vulnerability - Windows
Live555 Streaming Media is prone to a Use-After-Free vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Denial Of Service (DoS)
PHP is vulnerable to denial of service DoS. An infinite loop is possible in ext/iconv/iconv.c when streaming filter with convert.incov on invalid sequence, leading to an application crash...
LIVE555 Media Server Resource Management Error Vulnerability
LIVE555 Media Server is an RTSP server program. The program provides various media file streaming services. A resource management error vulnerability exists in versions prior to Live555 2019.08.16. No detailed vulnerability details are provided at this time...
libarchive: Multiple vulnerabilities
Background libarchive is a library for manipulating different streaming archive formats, including certain tar variants, several cpio formats, and both BSD and GNU ar variants. Description Multiple vulnerabilities have been discovered in libarchive. Please review the CVE identifiers referenced...
Amcrest Technologies IP Camera Unauthenticated Remote Audio Streaming Vulnerability
The remote installation of Amcrest Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it...
Amcrest Cameras 2.520.AC00.18.R - Unauthenticated Audio Streaming
Amcrest Cameras 2.520.AC00.18.R - Unauthenticated Audio Streaming Exploit Title: Unauthenticated Audio Streaming from Amcrest Camera Shodan Dork: html:"@WebVersion@" Date: 08/29/2019 Exploit Author: Jacob Baines Vendor Homepage: https://amcrest.com/ Software Link:...
Amcrest Cameras 2.520.AC00.18.R - Unauthenticated Audio Streaming
Exploit Title: Unauthenticated Audio Streaming from Amcrest Camera Shodan Dork: html:"@WebVersion@" Date: 08/29/2019 Exploit Author: Jacob Baines Vendor Homepage: https://amcrest.com/ Software Link: https://amcrest.com/firmwaredownloads Affected Version: V2.520.AC00.18.R Fixed Version:...
Amcrest Cameras 2.520.AC00.18.R Unauthenticated Audio Streaming
Exploit Title: Unauthenticated Audio Streaming from Amcrest Camera Shodan Dork: html:"@WebVersion@" Date: 08/29/2019 Exploit Author: Jacob Baines Vendor Homepage: https://amcrest.com/ Software Link: https://amcrest.com/firmwaredownloads Affected Version: V2.520.AC00.18.R Fixed Version:...
Amcrest Cameras 2.520.AC00.18.R - Unauthenticated Audio Streaming Exploit
Exploit for hardware platform in category web applications Exploit Title: Unauthenticated Audio Streaming from Amcrest Camera Shodan Dork: html:"@email protected" Exploit Author: Jacob Baines Vendor Homepage: https://amcrest.com/ Software Link: https://amcrest.com/firmwaredownloads Affected...
The vulnerability of the syntax analyzer for RTSP connections in the Gstreamer multimedia framework allows a hacker to execute arbitrary code.
The vulnerability of the RTSP parser in the Gstreamer multimedia framework is related to buffer overflow attacks. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...