PT-2019-5777 · FFmpeg +4 · Ffmpeg +4

Name of the Vulnerable Software and Affected Versions: FFmpeg version 4.1.3 Description: The issue is related to a division by zero error in the adx write trailer function of the libavformat library in the FFmpeg multimedia environment. This error can be exploited by a remote attacker to cause a...

Updated zziplib packages fix security vulnerability

In ZZIPlib 0.13.67, there is a segmentation fault caused by invalid memory access in the zzipdiskfread function zzip/mmapped.c because the size variable is not validated against the amount of file-stored data CVE-2018-6381. An unaligned memory access bug was found in the way ZZIPlib handled ZIP...

zziplib: Bus error in zip.c:__zzip_parse_root_directory() cause crash via crafted zip file

An improper input validation was found in function zzipfetchdisktrailer of ZZIPlib, up to 0.13.68, that could lead to a crash in zzipparserootdirectory function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

ZZIPlib Denial of Service Vulnerability (CNVD-2018-05513)

ZZIPlib is a set of lightweight file compression tools. A security vulnerability exists in the 'zzipfetchdisktrailer' function of the zzip/zip.c file in ZZIPlib version 0.13.67. A remote attacker can exploit this vulnerability to cause a denial of service with a specially crafted zip file...

ZZIPlib Denial of Service Vulnerability

ZZIPlib is a set of lightweight file compression tools. A security vulnerability exists in the 'zzipdiskfindfirst' function in the zzip/mmapped.c file in ZZIPlib version 0.13.67. An attacker can exploit the vulnerability to cause a bus error when handling disk64trailer find values...

Denial Of Service (DoS)

ZZIPlib is vulnerable to denial of service DoS attacks. It is possible that a zip file will cause a bus error due to the loading of a misaligned address in the zzipfetchdisktrailer function...

DEBIAN-CVE-2018-6541

In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address when handling disk64trailer local entries in zzipfetchdisktrailer zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

UBUNTU-CVE-2018-6541

In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address when handling disk64trailer local entries in zzipfetchdisktrailer zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

ZZIPlib '__zzip_fetch_disk_trailer' function denial of service vulnerability

ZZIPlib is a set of lightweight file compression tools. A security vulnerability exists in the 'zzipfetchdisktrailer' function in the zzip/zip.c file in ZZIPlib version 0.13.67. A remote attacker can exploit this vulnerability to cause a denial of service via a specially crafted zip file...

UBUNTU-CVE-2018-6484

In ZZIPlib 0.13.67, there is a memory alignment error and bus error in the zzipfetchdisktrailer function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

[slackware-security] curl

New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/curl-7.58.0-i586-1slack14.2.txz: Upgraded. This update fixes security issues: HTTP authentication leak in redirects HTTP/2...

CURL-CVE-2018-1000005 HTTP/2 trailer out-of-bounds read

libcurl contains an out bounds read in code handling HTTP/2 trailers. It was reported that reading an HTTP/2 trailer could mess up future trailers since the stored size was one byte less than required. The problem is that the code that creates HTTP/1-like headers from the HTTP/2 trailer data once...

PHP Scripts Mall Multiplex Movie Theater Booking Script SQL Injection Vulnerability

PHP Scripts Mall Multiplex Movie Theater Booking Script is a PHP based online theater seat booking script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Multiplex Movie Theater Booking Script version 3.1.5. A remote attacker can inject SQL into the Multiplex...

CVE-2017-17633

Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or event-detail.php eid parameter...

CVE-2017-17633

Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or event-detail.php eid parameter...

CVE-2017-17633

Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or event-detail.php eid parameter...

aice.org XSS vulnerability

Vulnerable URL: http://www.aice.org/trailers/newyork2014/qtpopup.php?name=Xss%22/%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E=Final%20Cut,%20USA,%20Inc.=Poster%20of%20%27A%20Streetcar%20Named%20Desire%27%20as%20an%20Urban%20Love%20Story%20=Co-Winner=PhillThumb02.png Details: Description| Value ---|-...

fagantrucktrailer.com XSS vulnerability

Vulnerable URL: http://www.fagantrucktrailer.com/preownedlist.asp?GroupBy=1%22--!%3E%3CSvg/Onload=confirmOPENBUGBOUNTY%3E%22=N=0=0=0===search=5 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

privatecasting-x.com XSS vulnerability

Open Bug Bounty ID: OBB-227943 Description| Value ---|--- Affected Website:| privatecasting-x.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

KINO.de Filme Trailer Programm - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application KINO.de Filme Trailer Programm published at the 'play' market has multiple vulnerabilities...