4470 matches found
CVE-2017-12861
The Epson "EasyMP" software is designed to remotely stream a users computer to supporting projectors.These devices are authenticated using a unique 4-digit code, displayed on-screen - ensuring only those who can view it are streaming.All Epson projectors supporting the "EasyMP" software are...
CVE-2017-12860
CVE-2017-12860 affects Epson EasyMP software used to remotely stream a user’s computer to projectors. The vulnerability stems from a hardcoded backdoor code (2270) that authenticates to all devices, in addition to the on-screen 4‑digit access code. Reported details indicate a network-accessible i...
CVE-2017-12861
The Epson "EasyMP" software is designed to remotely stream a users computer to supporting projectors.These devices are authenticated using a unique 4-digit code, displayed on-screen - ensuring only those who can view it are streaming.All Epson projectors supporting the "EasyMP" software are...
CVE-2017-12860
The Epson "EasyMP" software is designed to remotely stream a users computer to supporting projectors.These devices are authenticated using a unique 4-digit code, displayed on-screen - ensuring only those who can view it are streaming.In addition to the password, each projector has a hardcoded...
Don’t let these gaming threats give you a Game Over
With EGX, the biggest gaming event in the UK opening its doors today, we thought it'd be timely to remind you of some of the threats currently facing gamers. No matter what type of game, client, or system you use, there's always something waiting to try and give you a bad day where the safety of...
Cb Defense Q3 2017 Release Future-Proofs Your Ransomware Defenses
We’re excited to announce the Cb Defense Q3 2017 release is here! Cb Defense has always been focused on bringing you the best possible prevention, built upon our unique streaming prevention platform, combined with our market-leading endpoint detection and response EDR capabilities. The Q3 2017...
FFmpeg libavformat/mov.c File Denial of Service Vulnerability
FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the libavformat/mov.c file in FFmpeg version 3.3.3, which is caused by the program's failure to adequately detect EOF End of File. The vulnerability can b...
FFmpeg libavformat/nsvdec.c File Resource Management Error Vulnerability
FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the libavformat/nsvdec.c file in FFmpeg version 3.3.3, which is caused by the program's failure to adequately detect EOF End of File. A remote attacker ca...
Tor Linux Sandbox Breakout Via X11
Tor: Linux sandbox breakout via X11 From inside the Linux sandbox described in https://blog.torproject.org/blog/tor-browser-70-released, it is still possible to talk to the X server without any restrictions. This means that a compromised browser can e.g. use the XTEST X protocol extension at...
ALPINE-CVE-2017-14057
In FFmpeg 3.3.3, a DoS in asfreadmarker due to lack of an EOF End of File check might cause huge CPU and memory consumption. When a crafted ASF file, which claims a large "namelen" or "count" field in the header but does not contain sufficient backing data, is provided, the loops over the name an...
Debian DSA-3957-1 : ffmpeg - security update
Several vulnerabilities have been discovered in FFmpeg, a multimedia player, server and encoder. These issues could lead to Denial-of-Service and, in some situation, the execution of arbitrary code. - CVE-2017-9608 Yihan Lian of Qihoo 360 GearTeam discovered a NULL pointer access when parsing a...
SQL Injection Vulnerability in Infinite Streaming Media System (AMS) of Beijing Zhongshi Media Technology Co.
Infinite Streaming Media System AMS is a complete set of IP network-based audio/video application platform, integrating CTVTV's live video broadcasting system, video-on-demand VOD system, video broadcasting system and video production sub-systems, aiming to provide users with a complete set of...
CentOS 7 : clutter-gst2 / gnome-video-effects / gstreamer-plugins-bad-free / etcgstreamer1 / etc (CESA-2017:2060)
An update is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links ...
Cross-site Scripting Vulnerability in Infinite Streaming Media System (AMS) of Beijing Zhongshi Media Technology Co.
Infinite Streaming Media System AMS is a complete set of IP network-based audio/video application platform, integrating CTVTV's live video broadcasting system, video-on-demand VOD system, video broadcasting system and video production sub-systems, aiming to provide users with a complete set of...
PVS Servers Show Offline on PVS Console - Event ID 11 - Undefined Database Error
PVS server shows offline in the PVS console, although Streaming service is running on occasion: An error in event viewer: Event ID: 11 – Undefined database error/PVS server status is "Down" This is an internal error. Please contact technical support...
Capturing, Analyzing and Responding to Cyber Attacks: cyberprobe
The Cyberprobe project is an open-source distributed architecture for real-time monitoring of networks against attack. The software consists of two components: a probe, which collects data packets and forwards it over a network in standard streaming protocols. a monitor, which receives the stream...
[SECURITY] Fedora 26 Update: jackson-databind-2.7.6-3.fc26
General data-binding functionality for Jackson: works on core streaming API...
[SECURITY] Fedora 25 Update: jackson-databind-2.7.6-3.fc25
General data-binding functionality for Jackson: works on core streaming API...
cxf: CXF JAX-RS XML Security streaming clients do not validate that the service response was signed or encrypted
It was found that a flaw exists in JAX-RS clients using the streaming approach for XML signatures and encryption, where it does not enforce the message to be signed/encrypted. This could allow an attacker to subvert the integrity of the message...
