UBUNTU-CVE-2018-19212

In libwebm through 2018-10-03, there is an abort caused by libwebm::Webm2Pes::InitWebmParser that will lead to a DoS attack...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free. A use-after-free issue was discovered in libwebm through 2018-02-02. If a Vp9HeaderParser was initialized once before, its property frame would not be changed because of code in vp9parser::Vp9HeaderParser::SetFrame. Its...

libwebm 'ParseVP9SuperFrameIndex' function heap buffer out-of-bounds read and out-of-bounds write vulnerabilities

libwebm is an open source network media file codec library . A security vulnerability in the 'ParseVP9SuperFrameIndex' function in the common/libwebmutil.cc file in libwebm on 2018-01-30 and prior versions stems from the program's failure to validate the childframelength data of .webm files. A...

CVE-2018-6406

The function ParseVP9SuperFrameIndex in common/libwebmutil.cc in libwebm through 2018-01-30 does not validate the childframelength data obtained from a .webm file, which allows remote attackers to cause an information leak or a denial of service heap-based buffer over-read and later out-of-bounds...

CVE-2018-6406

The function ParseVP9SuperFrameIndex in common/libwebmutil.cc in libwebm through 2018-01-30 does not validate the childframelength data obtained from a .webm file, which allows remote attackers to cause an information leak or a denial of service heap-based buffer over-read and later out-of-bounds...

UBUNTU-CVE-2018-6406

The function ParseVP9SuperFrameIndex in common/libwebmutil.cc in libwebm through 2018-01-30 does not validate the childframelength data obtained from a .webm file, which allows remote attackers to cause an information leak or a denial of service heap-based buffer over-read and later out-of-bounds...

Memory corruption vulnerability exists in Xunlei Video (CNVD-2017-34313)

Xunlei Video is a product of Xunlei company a video and audio playback software. A memory corruption vulnerability exists in Xunlei Video Player when parsing certain webm files, which can be exploited by attackers to cause a denial of service attack or execute arbitrary code...

Memory Corruption Vulnerability Exists in Video Pioneer PC (CNVD-2017-34298)

Video Pioneer is a software that can play video and audio online based on P2P Cloud 3D technology, supporting multiple streaming protocols, multiple audio and video formats. A memory corruption vulnerability exists in the Pioneer Player when parsing special webm files, which can be exploited by...

Memory Corruption Vulnerability in QQ Video

QQ Video is a local player from Tencent that supports movie and music files in any format. A memory corruption vulnerability exists in QQ Video Player when parsing certain format webm files, which can be exploited by attackers to cause a denial of service attack...

Buffer Overflow Vulnerability in Baidu Video

Baidu Video is a new experience player newly launched by Baidu. It supports video and audio files in mainstream media formats and realizes local playback and online on-demand playback. A buffer overflow vulnerability exists in Baidu AV player when parsing videos in a particular webm format. An...

Google Chrome webm video uninitialized memory access vulnerability

Google Chrome is a popular web browser. An uninitialized memory access vulnerability in Google Chrome webm video allows remote attackers to exploit the vulnerability to construct a malicious web page and trick users into parsing it, which can crash the application or execute arbitrary code...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks and possibly other attacks. A malicious user can pass a malicious WebM file to create race conditions in the system that can lead to the system crashing...

Debian Security Advisory DSA 3776-1 (chromium-browser - security update)

Several vulnerabilities have been discovered in the chromium web browser. CVE-2017-5006 Mariusz Mlynski discovered a cross-site scripting issue. CVE-2017-5007 Mariusz Mlynski discovered another cross-site scripting issue. CVE-2017-5008 Mariusz Mlynski discovered a third cross-site scripting issue...

Debian DSA-3776-1 : chromium-browser - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2017-5006 Mariusz Mlynski discovered a cross-site scripting issue. - CVE-2017-5007 Mariusz Mlynski discovered another cross-site scripting issue. - CVE-2017-5008 Mariusz Mlynski discovered a third cross-site scripting...

Google Chrome < 56.0.2924.76 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 56.0.2924.76. It is, therefore, affected by multiple vulnerabilities as referenced in the 201701stable-channel-update-for-desktop advisory. - A use after free in Google Chrome prior to 56.0.2924.76 for Linux, Windows an...

chromium-browser: uninitialised memory access in webm video

Interactions with the OS in Google Chrome prior to 56.0.2924.76 for Mac insufficiently cleared video memory, which allowed a remote attacker to possibly extract image fragments on systems with GeForce 8600M graphics chips via a crafted HTML page...

FreeBSD : ffmpeg -- multiple vulnerabilities (b0da85af-21a3-4c15-a137-fe9e4bc86002)

NVD reports : The updatedimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service race...

ffmpeg -- multiple vulnerabilities

NVD reports: The updatedimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service race conditi...

The vulnerability of FFmpeg’s multimedia library in Google Chrome browsers allows attackers to trigger a service failure.

The vulnerability of the FFmpeg multimedia library arises from synchronization errors when using a shared resource. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failure through the use of a specially crafted WebM file...

Google Chrome FFmpeg Competitive Conditions Vulnerability

Google Chrome is an open source WEB browser. The 'updatedimensions' function in the libavcodec/vp8.c file of FFmpeg used by Google to perform multi-threaded operations relies on coefficient-partition counting, allowing remote attackers to build special WebM files for denial-of-service attacks...