4474 matches found
USN-3967-1: FFmpeg vulnerabilities
It was discovered that FFmpeg contained multiple security issues when handling certain multimedia files. If a user were tricked into opening a crafted multimedia file, an attacker could cause a denial of service via application crash...
Malware Infests Popular Pirate Streaming Hardware
You get what you pay for when you pirate content. That’s the takeaway from the latest report by Digital Citizens Alliance. It found that pirating hardware, which enables free streaming copyright-protected content, comes packed with malicious malware. The devices give criminals easy access to rout...
USN-3958-1 gst-plugins-base0.10, gst-plugins-base1.0 vulnerability
It was discovered that GStreamer Base Plugins did not correctly handle certain malformed RTSP streams. If a user were tricked into opening a crafted RTSP stream with a GStreamer application, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code...
Debian DLA-1770-1 : gst-plugins-base1.0 security update
The RTSP connection parser in the base GStreamer packages version 1.0, which is a streaming media framework, was vulnerable against an heap-based buffer overflow by sending a longer than allowed session id in a response and including a semicolon to change the maximum length. This could result in ...
[SECURITY] [DLA 1769-1] gst-plugins-base0.10 security update
rom: Thorsten Alteholz [email protected] To: [email protected] Subject: SECURITY DLA 1769-1 gst-plugins-base0.10 security update Package : gst-plugins-base0.10 Version : 0.10.36-2+deb8u1 CVE ID : CVE-2019-9928 Debian Bug : The RTSP connection parser in the base GStreamer...
ALPINE-CVE-2019-9928
GStreamer before 1.16.0 has a heap-based buffer overflow in the RTSP connection parser via a crafted response from a server, potentially allowing remote code execution...
CVE-2019-10711
Incorrect access control in the RTSP stream and web portal on all IP cameras based on Hisilicon Hi3510 firmware until Webware version V1.0.1 allows attackers to view an RTSP stream by connecting to the stream with hidden credentials guest or user that are neither displayed nor configurable in the...
Traffic Management for Peace of Mind
Ensure Quality of Experience and Readiness with CDN Capacity Overflow Have you ever planned and launched a system with painstaking detail and, at some point in time, something unexpected breaks the system? An unexpected event might be an unanticipated scenario a bug! or user adoption beyond...
Download Livestream website, the user is not disclosed or regular rows of multicast video-bug warning-the black bar safety net
Recently, I found a Livestream website vulnerabilities, using the vulnerability you can get it any Registered User is not open or regularly discharge the multicast stream of video content. Livestream is a video streaming platform that allows users to use the camera and computer via Internet live...
Citrix Provisioning Console Error: 0x00000057 - Invalid Parameter
Citrix Provisioning does not support VHD based vDisks on 4K storage in any Citrix Provisioning product version. Microsoft's VHD file specification only supports a disk logical sector size of 512 bytes. A read/write access VHD on 4K disk will trigger read-modify-write emulation, which results in...
Design/Logic Flaw
WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloading livestream video HLS, DASH, or Smooth Streaming, an error resulting in deanonymization. This issue was corrected by changing the way livestreams are downloaded...
CVE-2019-11070
WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloading livestream video HLS, DASH, or Smooth Streaming, an error resulting in deanonymization. This issue was corrected by changing the way livestreams are downloaded...
CVE-2019-11070
WebKitGTK/WebKitGTK4 (webkitgtk4) is affected by CVE-2019-11070. The issue arises from WebKitGTK and WPE WebKit prior to 2.24.1 failing to apply configured HTTP proxy settings when downloading livestream video (HLS/DASH/Smooth Streaming), leading to potential deanonymization. Remediation in the c...
Airsonic Encryption Issues Vulnerabilities
Airsonic is a web-based streaming server. A security vulnerability exists in Airsonic version 10.2.1. An attacker can exploit the vulnerability to brute-force break passwords...
[SECURITY] Fedora 28 Update: libarchive-3.3.3-6.fc28
Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...
The vulnerability of the Live555 library from the liblivemedia package, which allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the Live555 library in the liblivemedia package is related to improper handling of RTSP stream termination after setting RTP/RTCP over RTSP. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures...
March Madness Scams Give Attackers Fast Break
With the 2019 NCAA tournament’s Final Four around the corner, researchers are urging viewers to be wary of a slew of March Madness-related phishing attacks, adware installers and other security threats. While security concerns regarding popular sporting events – from the World Cup to the Super Bo...
[SECURITY] Fedora 30 Update: libarchive-3.3.3-6.fc30
Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...
Spycams Secretly Live-Streamed 1,600 Motel Guests
Four people have been arrested for taking secret videos of guests at motels and live-streaming them to paying audiences. According to Seoul police, the perps filmed about 1,600 motel guests in the past year in various states of undress and having sex. They did so with tiny wireless spy cameras se...
