CVE-2014-9639: Undefined Security Weakness

Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service crash via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access...

Batch-Audio-Converter-Lite-Edition-1.0.0.0

Tested on: Windows XP SP2 Type of Vuln: SEH Code : bacon-exploit.py Greetz: Otoy, Postnix, Jasakom Community, Kilurah, Gesang, dan wedus-wedus import struct junk = "A" 4132 nseh = "\xeb\x06\x90\x90" seh = struct.pack'L', 0x10029bb7 pop edi pop esi ret from lameenc.dll nop = "\x90" 30 print "+...

A-PDF-WAV-to-MP3-1.0.0

This exploit uses SEH to gain code execution, while EDB 14676 uses a direct EIP overwrite which is operating system specific. code = "\x89\xe1\xd9\xee\xd9\x71\xf4\x58\x50\x59\x49\x49\x49\x49" "\x43\x43\x43\x43\x43\x43\x51\x5a\x56\x54\x58\x33\x30\x56"...

Fat-Player-0.6b-WAV

Stack-based buffer overflow in Fat Player 0.6b allows remote attackers to execute arbitrary code via a long string in a .wav file. NOTE: some of these details are obtained from third party information. print "\nFat Player 0.6b WAV File Processing Buffer Overflow SEH" buff1 = "D" 4132 nseh =...

FatPlayer-0.6b-(.wav)

Exploit Title: FatPlayer 0.6b Malicious WAV Buffer Overflow Vulnerability SEH Date: 10/18/10 Author: james AT learnsecurityonline DOT com Software Link: http://sourceforge.net/projects/fatplayer/files/ Version: 0.6 Beta junk = "\x41" 4132 nSEH = "\x90\x90\xeb\x06" SEH = 0x0046bee3.pack'V' pop pop...

Wav-Player-1.1.3.6-(.pll)

Open the wav player, make a playlist and save it. Then, close the player and run this exploit to create the new playlist. When you open again wav player, you will see the calc. fichero = open"wvplayer.pll", "w" print "+ Creating exploit .pll..." fichero.write"A"1034 Padding fichero.write"t%dA" he...

PotPlayer-1.5.42509-Beta

Exploit Title:PotPlayer 1.5.42509 Beta - DOSInteger Division by Zero Author: sajith version: PotPlayer 1.5.42509 Beta Vendor Homepage: http://daumpotplayer.com/ Tested in: Windows XP SP3 rawinput"Hit Enter to create a malicious file" f = open"victim.wav","w"...

Free-WMA-MP3-Converter-1.8

Free WMA MP3 Converter 1.8 Buffer Overflow Version:1.8 Build 20140226 Author:metacom Date:10.23.2014 Download:http://www.eusing.com/freewmaconverter/mp3wmaconverter.htm import struct def littleendianaddress: return struct.pack"L",address poc="\x41" 4112 eip=littleendian0x0045CD1A0045CD1A FFE4 JMP...

DLA-128-1 sox - security update

Bulletin has no description...

CVE-2014-8145

Multiple heap-based buffer overflows in Sound eXchange SoX 14.4.1 and earlier allow remote attackers to have unspecified impact via a crafted WAV file to the 1 startread or 2 AdpcmReadBlock function...

CVE-2014-8145

Multiple heap-based buffer overflows in Sound eXchange SoX 14.4.1 and earlier allow remote attackers to have unspecified impact via a crafted WAV file to the 1 startread or 2 AdpcmReadBlock function...

Heap overflow

Multiple heap-based buffer overflows in Sound eXchange SoX 14.4.1 and earlier allow remote attackers to have unspecified impact via a crafted WAV file to the 1 startread or 2 AdpcmReadBlock function...

CVE-2014-8145

Multiple heap-based buffer overflows in Sound eXchange SoX 14.4.1 and earlier allow remote attackers to have unspecified impact via a crafted WAV file to the 1 startread or 2 AdpcmReadBlock function...

CVE-2014-8145

CVE-2014-8145 affects SoX (Sound eXchange) 14.4.1 and earlier across multiple distros. The flaw comprises multiple heap-based buffer overflows triggered by crafted WAV (and related) files, notably via start_read and AdpcmReadBlock in wav processing, leading to remote impact with unspecified conse...

CVE-2014-8145

Multiple heap-based buffer overflows in Sound eXchange SoX 14.4.1 and earlier allow remote attackers to have unspecified impact via a crafted WAV file to the 1 startread or 2 AdpcmReadBlock function...

CVE-2014-8145

Multiple heap-based buffer overflows in Sound eXchange SoX 14.4.1 and earlier allow remote attackers to have unspecified impact via a crafted WAV file to the 1 startread or 2 AdpcmReadBlock function...

MGASA-2014-0561 Updated sox packages fix CVE-2014-8145

Updated sox packages fix security vulnerability: The sox command line tool is affected by two heap-based buffer overflows, respectively located in functions startread and AdpcmReadBlock. A specially crafted wav file can be used to trigger the vulnerabilities CVE-2014-8145...

CVE-2014-8145: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple heap-based buffer overflows in Sound eXchange SoX 14.4.1 and earlier allow remote attackers to have unspecified impact via a crafted WAV file to the 1 startread or 2 AdpcmReadBlock function...

PT-2014-8433

Name of the Vulnerable Software and Affected Versions SoX versions 14.4.1 and earlier Description The issue is related to multiple heap-based buffer overflows that can be triggered by remote attackers sending a crafted WAV file. This can affect the start read or AdpcmReadBlock function, potential...

Debian DSA-3112-1 : sox - security update

Michele Spagnuolo of the Google Security Team dicovered two heap-based buffer overflows in SoX, the Swiss Army knife of sound processing programs. A specially crafted wav file could cause an application using SoX to crash or, possibly, execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network...