Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: media: uvcvideo: Skip parsing frames of type UVCVSUNDEFINED in uvcparseformat CVE-2024-53104 For more details about the security issues, including the impact, a CVSS score, acknowledgment...

SUSE-SU-2023:4575-1 Security update for gstreamer-plugins-bad

This update for gstreamer-plugins-bad fixes the following issues: - CVE-2023-40474: Fixed integer overflow causing out of bounds writes when handling invalid uncompressed video bsc1215796. - CVE-2023-40476: Fixed possible overflow using maxsublayersminus1 bsc1215793...

CVE-2023-32837

In video, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08235273; Issue ID: ALPS08250357...

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird, related to memory usage after deallocation, allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird relates to the use of memory after deallocation during the manipulation of video elements. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, an...

UBUNTU-CVE-2019-11746

A use-after-free vulnerability can occur while manipulating video elements if the body is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Firefox 69, Thunderbird 68.1, Thunderbird 60.9, Firefox ESR 60.9, and Firefox ESR 68.1...

Mozilla Firefox MPEG4 Video Processing Buffer Overflow Vulnerability (CNVD-2015-05452)

Mozilla Firefox is an open source WEB browser. An integer overflow vulnerability exists in Mozilla Firefox's handling of MPEG4 video, which allows remote attackers to construct a malicious web page and trick users into parsing it, which could crash the application or execute arbitrary code...

Asterisk SIP SDP Buffer Overflow (AST-2013-001)

According to the version in its SIP banner, the version of Asterisk running on the remote host is potentially affected by a buffer overflow vulnerability related to SIP SDP headers and h264 video handling. This error could allow execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2011-3890

CVE-2011-3890: A use-after-free in Google Chrome prior to 15.0.874.102 related to video source handling can allow remote attackers to cause a denial of service or possibly other impact. Affects Chrome versions before the fixed build; exploitation details and in-wild activity are not described in ...

CVE-2011-2851

Google Chrome before 14.0.835.163 does not properly handle video, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

CVE-2011-2851

Google Chrome before 14.0.835.163 does not properly handle video, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

CVE-2011-2851

Google Chrome before 14.0.835.163 does not properly handle video, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

CVE-2011-2851

Removed by vendor...

Google Chrome multiple vulnerabilities - Jan11 (Linux)

The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnjan11lin.nasl 7052 2017-09-04 11:50:51Z teissa $ Google Chrome Multiple Vulnerabilities - Jan11 Linux Authors: Sooraj KS Copyright: Copyright c 2011 Greenbone Networks...

CVE-2011-0483

Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified variable during handling of video, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

CVE-2011-0483

Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified variable during handling of video, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

Code injection

Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified variable during handling of video, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

CVE-2011-0483

Removed by vendor...

Google Chrome < 8.0.552.237 Multiple Vulnerabilities

Binary data 5742.pasl...