Most recent entries from all

4HZM000603 — ABB Ability Camera Connect Vulnerabilities in outdated 3rd party component (VLC)

ABB is aware of public reports of vulnerabilities in a 3rd party component VLC media player Version 2.2.4 which was delivered together with the installation package of Camera Connect Version 1.5.0.14 and below. An update is available that resolves a privately reported outdated 3rd party component with vulnerabilities in the product versions listed as affected in this advisory.

An attacker who successfully exploited any of these vulnerabilities in the 3rd party component could potentially compromise the system in different ways.

bdu:2019-04176

cnvd-2017-08121

EUVD-2026-75228

fkie_cve-2017-8312

Heap out-of-bound read in ParseJSS in VideoLAN VLC due to missing check of string length allows attackers to read heap uninitialized data via a crafted subtitles file.

GHSA-f5gw-wx32-xw5r

Heap out-of-bound read in ParseJSS in VideoLAN VLC due to missing check of string length allows attackers to read heap uninitialized data via a crafted subtitles file.

gsd-2017-8312

ICSA-26-146-05 — ABB Ability Camera Connect

An attacker who successfully exploited any of these vulnerabilities in the 3rd party component could potentially compromise the system in different ways.

UBUNTU-CVE-2017-8312

Affected: Ubuntu:14.04:LTS: vlc, Ubuntu:16.04:LTS: vlc

Heap out-of-bound read in ParseJSS in VideoLAN VLC due to missing check of string length allows attackers to read heap uninitialized data via a crafted subtitles file.