CVE-2008-2430

CVE-2008-2430 affects VLC Media Player 0.8.6h on Windows via an integer overflow in the Open() function of modules/demux/wav.c when parsing a WAV fmt chunk that is too large. This vulnerability could allow remote code execution by luring a user to open a specially crafted WAV file. Related adviso...

CVE-2008-2430: Undefined Security Weakness

Integer overflow in the Open function in modules/demux/wav.c in VLC Media Player 0.8.6h on Windows allows remote attackers to execute arbitrary code via a large fmt chunk in a WAV file...

Secunia Research: VLC Media Player WAV Processing Integer Overflow

====================================================================== Secunia Research 02/07/2008 - VLC Media Player WAV Processing Integer Overflow - ====================================================================== Table of Contents Affected...

VLC Media Player WAV文件缓冲区溢出漏洞

BUGTRAQ ID: 30058 CVE ID：CVE-2008-2430 CNCVE ID：CNCVE-20082430 VLC media player是一款流行的媒体播放器。 VLC media player处理WAV文件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 modules/demux/wav.c文件中的"Open"函数存在一个整数溢出，构建包含超大"fmt"块的WAV文件，诱使用户访问，可触发基于堆的溢出，可能以应用程序权限执行任意指令。 VideoLAN VLC media player 0.8.6 h 升级程序： VideoLAN VLC...

Stack overflow

Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX control in NCTAudioInformation2.dll, as used in 1 Power Audio CD Grabber 1.0, 2 Power Audio CD Burner 1.02, 3 CinematicMP3 1.4.0.0, 4 Alive MP3 WAV Converter 3.9.3.2, and possibly other...

CVE-2008-0959

Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX control in NCTAudioInformation2.dll, as used in 1 Power Audio CD Grabber 1.0, 2 Power Audio CD Burner 1.02, 3 CinematicMP3 1.4.0.0, 4 Alive MP3 WAV Converter 3.9.3.2, and possibly other...

CVE-2008-0959: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX control in NCTAudioInformation2.dll, as used in 1 Power Audio CD Grabber 1.0, 2 Power Audio CD Burner 1.02, 3 CinematicMP3 1.4.0.0, 4 Alive MP3 WAV Converter 3.9.3.2, and possibly other...

Design/Logic Flaw

Simple Machines Forum SMF, probably 1.1.4, relies on "randomly generated static" to hinder brute-force attacks on the WAV file aka audio CAPTCHA, which allows remote attackers to pass the CAPTCHA test via an automated attack that considers Hamming distances. NOTE: this issue reportedly exists...

CVE-2008-2019

Simple Machines Forum SMF, probably 1.1.4, relies on "randomly generated static" to hinder brute-force attacks on the WAV file aka audio CAPTCHA, which allows remote attackers to pass the CAPTCHA test via an automated attack that considers Hamming distances. NOTE: this issue reportedly exists...

CVE-2008-2019

SMF (likely version ~1.1.4) is vulnerable due to a weak WAV CAPTCHA generation that relies on insufficient randomness, allowing automated brute-force bypass of the CAPTCHA. Root cause points to an insufficient fix for CVE-2007-3308; exploitation status and exact patch details are not provided in ...

Debian Security Advisory DSA 565-1 (sox)

The remote host is missing an update to sox announced via advisory DSA 565-1. OpenVAS Vulnerability Test $Id: deb5651.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 565-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1332-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-565-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft DirectX remote code execution

Overview Microsoft DirectX is vulnerable to a remote code execution vulnerability which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft DirectX is a feature of the Microsoft Windows operating system used for streaming multimedia...

Microsoft DirectX SAMI及WAV/AVI文件解析远程代码执行漏洞（MS07-064）

BUGTRAQ ID: 26804,26789 CVECAN ID: CVE-2007-3901,CVE-2007-3895 Microsoft DirectX是Windows操作系统中的一项功能，流媒体在玩游戏或观看视频时通过这个功能支持图形和声音。 Microsoft DirectX处理畸形格式的媒体文件时存在漏洞，本地攻击者可能利用此漏洞提升自己的权限。 集成DirectX技术的Microsoft DirectShow没有对Synchronized Accessible Media...

Microsoft Windows DirectX multiple security vulnerabilities

Synchronized Accessible Media Interchange SAMI, WAV and AVI...

Buffer overflow

Buffer overflow in Microsoft DirectShow in Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted 1 WAV or 2 AVI file...

CVE-2007-3895

Buffer overflow in Microsoft DirectShow in Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted 1 WAV or 2 AVI file...

CVE-2007-3895

Buffer overflow in Microsoft DirectShow in Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted 1 WAV or 2 AVI file...

CVE-2007-3895: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Microsoft DirectShow in Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted 1 WAV or 2 AVI file...