Out of bounds read during WAV file decoding — Mozilla

Security researcher Atte Kettunen from OUSPG reported an out of bounds read during the decoding of WAV format audio files for playback. This could allow web content access to heap data as well as causing a crash...

DEBIAN-CVE-2014-0027

The playwavefromsocket function in audio/auserver.c in Flite 1.4 allows local users to modify arbitrary files via a symlink attack on /tmp/awb.wav. NOTE: some of these details are obtained from third party information...

Microsoft Windows Movie Maker '.wav'文件拒绝服务漏洞

Bugtraq ID:61334 CVE ID:CVE-2013-4858 Microsoft Windows Movie Maker是一款简易非线性编辑软件。可以制作、编辑及分享家庭影片，并新增特殊效果、音乐及旁白，然后通过网络、电子邮件或CD分享您制作的电影。 Windows XP SP3上的Microsoft Windows Movie Maker不正确处理.wav文件，允许远程攻击者利用漏洞构建恶意文件，诱使用户解析，可使应用程序崩溃。 0 Microsoft Windows Movie Maker 2.1.4026 目前没有详细解决方案提供：...

Microsoft Windows Movie Maker Denial of Service Vulnerability

Microsoft Windows Movie Maker is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ofilter Player WAV文件处理除零错误拒绝服务漏洞

Ofilter Player是一款简单易用的多媒体播放器。 Ofilter Player不正确处理畸形WAV文件，允许攻击者构建恶意文件，诱使应用程序解析，触发除零错误，可使应用程序崩溃。 0 Ofilter Player 1.1 目前没有详细解决方案提供： http://www.008soft.com/ ?php / Title: Ofilter Player 1.1 .wav Integer Division by Zero Version: 1.1 Tested on: Windows XP SP2 en Vendor: http://www.008soft.com/ Softwa...

CVE-2013-4858

Microsoft Windows Movie Maker 2.1.4026.0 on Windows XP SP3 allows remote attackers to cause a denial of service application crash via a crafted .wav file, as demonstrated by movieMaker.wav...

Design/Logic Flaw

Microsoft Windows Movie Maker 2.1.4026.0 on Windows XP SP3 allows remote attackers to cause a denial of service application crash via a crafted .wav file, as demonstrated by movieMaker.wav...

CVE-2013-4858

CVE-2013-4858 affects Microsoft Windows Movie Maker 2.1.4026.0 on Windows XP SP3. A crafted WAV file can trigger an application crash, causing a denial of service. The vulnerability is described consistently across sources (NVD entry and OpenVAS NASL), citing the movieMaker.wav payload as the exp...

CVE-2013-4858

Microsoft Windows Movie Maker 2.1.4026.0 on Windows XP SP3 allows remote attackers to cause a denial of service application crash via a crafted .wav file, as demonstrated by movieMaker.wav...

Easy Karaokay Player '.wav'文件除零错误拒绝服务漏洞

No description provided by source. !/usr/bin/python Title: Easy Karaokay Player 3.3.31 .wav Integer Division by Zero Version: 3.3.31 Older Versions might be vulnerable as well Tested on: Windows XP SP2 en Vendor: http://www.008soft.com/ Software Link: http://www.008soft.com/downloadskaraoke.exe...

CVE-2013-4858: Improper Input Validation

Microsoft Windows Movie Maker 2.1.4026.0 on Windows XP SP3 allows remote attackers to cause a denial of service application crash via a crafted .wav file, as demonstrated by movieMaker.wav...

PT-2013-5245

Name of the Vulnerable Software and Affected Versions Microsoft Windows Movie Maker version 2.1.4026.0 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, by using a crafted .wav file. Recommendations For Microsoft Windows Movie Maker...

Ofilter Player 1.1 - .wav Integer Division by Zero

Ofilter Player 1.1 - .wav Integer Division by Zero ?php / Title: Ofilter Player 1.1 .wav Integer Division by Zero Version: 1.1 Tested on: Windows XP SP2 en Vendor: http://www.008soft.com/ Software Link: http://www.008soft.com/downloadsOfilterPlayer.exe E-Mail: [email protected] Bug...

Ofilter Player 1.1 - '.wav' Integer Division by Zero

?php / Title: Ofilter Player 1.1 .wav Integer Division by Zero Version: 1.1 Tested on: Windows XP SP2 en Vendor: http://www.008soft.com/ Software Link: http://www.008soft.com/downloadsOfilterPlayer.exe E-Mail: [email protected] Bug Discovered by: Osanda Malith Twitter: @OsandaMalith /!...

Windows Live Movie Maker 2011 Denial Of Service

!/usr/bin/env ruby Title: Windows Live Movie Maker 2011 .wav DoS Local Exploit Version: Version 2011 Build 15.4.53508.1109 Tested on: Windows 7 Professional 32-bit SP1 E-Mail: [email protected] Exploit-Author: Osanda Malith Jayathissa Video: https://www.youtube.com/watch?v=SBJYzSNdY6k /!...

Easy Karaokay Player 3.3.31 - .wav Integer Division by Zero

Easy Karaokay Player 3.3.31 - .wav Integer Division by Zero !/usr/bin/python Title: Easy Karaokay Player 3.3.31 .wav Integer Division by Zero Version: 3.3.31 Older Versions might be vulnerable as well Tested on: Windows XP SP2 en Vendor: http://www.008soft.com/ Software Link:...

Easy Karaoke Player 3.3.31 Integer Division By Zero

!/usr/bin/python Title: Easy Karaokay Player 3.3.31 .wav Integer Division by Zero Version: 3.3.31 Older Versions might be vulnerable as well Tested on: Windows XP SP2 en Vendor: http://www.008soft.com/ Software Link: http://www.008soft.com/downloadskaraoke.exe E-Mail: [email protected]...

PotPlayer 1.5.42509 Beta - DOS (Integer Division by Zero Exploit)

Exploit for windows platform in category local exploits !/usr/bin/python rawinput"Hit Enter to create a malicious file" f = open"victim.wav","w" header="\x2E\x73\x6E\x64\x00\x00\x01\x18\x00\x00\x42\xDC\x00\x00\x00\x01" "\x00\x00\x1F\x40\x00\x00\x00\x00\x69\x61\x70\x65\x74\x75\x73\x2E"...

Boilsoft RM TO MP3 Converter 1.72 - Crash POC (.wav) Vulnerability

Exploit for windows platform in category dos / poc First chance exceptions are reported before any exception handling. This exception may be expected and handled. eax=ffffffff ebx=003b96d8 ecx=00000000 edx=00000000 esi=ffffffff edi=001b99ba eip=7498e82c esp=0012db78 ebp=0012dc0c iopl=0 nv up ei p...

Boilsoft RM TO MP3 Converter 1.72 - .wav Crash (PoC)

Boilsoft RM TO MP3 Converter 1.72 - .wav Crash PoC Exploit Title: Boilsoft RM TO MP3 Converter 1.72 .wav - Crash POC Date: 21.11.2013 Exploit Author: Akin Tosunlar Software Link: http://www.boilsoft.net/download/rmtomp3.exe Version: 1.72 Probably old version of software and the LATEST version too...