1681 matches found
CVE-2007-3308
The CVE-2007-3308 entry concerns Simple Machines Forum (SMF) version 1.1.2, where the WAV file CAPTCHA is created by a concatenation method with insufficient randomization. This flaw allows remote attackers to bypass the CAPTCHA via automated brute-force attempts. The provided records indicate no...
CVE-2007-3308: Undefined Security Weakness
Simple Machines Forum SMF 1.1.2 uses a concatenation method with insufficient randomization when creating a WAV file CAPTCHA, which allows remote attackers to pass the CAPTCHA test via an automated brute-force attack...
vlc -- format string vulnerability and integer overflow
isecpartners reports: VLC is vulnerable to a format string attack in the parsing of Vorbis comments in Ogg Vorbis and Ogg Theora files, CDDA data or SAP/SDP service discovery messages. Additionally, there are two errors in the handling of wav files, one a denial of service due to an uninitialized...
FTP Server Zipped .wav File Uploaded
Binary data 4059.prm...
FTP Server Zipped .wav File Detection
Binary data 4043.prm...
FTP Server .wav Files Detection
Binary data 4009.prm...
Code injection
winmm.dll in Microsoft Windows XP allows user-assisted remote attackers to cause a denial of service infinite loop via a large cch argument value to the mmioRead function, as demonstrated by a crafted WAV file...
CVE-2007-1492
winmm.dll in Microsoft Windows XP allows user-assisted remote attackers to cause a denial of service infinite loop via a large cch argument value to the mmioRead function, as demonstrated by a crafted WAV file...
CVE-2007-1492
CVE-2007-1492 affects winmm.dll on Windows XP. The vulnerable component is mmioRead, triggered by a crafted WAV file with a large cch argument value, enabling user-assisted remote attackers to cause a denial-of-service (infinite loop). Exploitation context and specific versions beyond Windows XP ...
CVE-2007-1492
winmm.dll in Microsoft Windows XP allows user-assisted remote attackers to cause a denial of service infinite loop via a large cch argument value to the mmioRead function, as demonstrated by a crafted WAV file...
CVE-2007-1492: Undefined Security Weakness
winmm.dll in Microsoft Windows XP allows user-assisted remote attackers to cause a denial of service infinite loop via a large cch argument value to the mmioRead function, as demonstrated by a crafted WAV file...
Microsoft Windows XP2000 - WinMM.dll .WAV Remote Denial of Service
Microsoft Windows XP2000 - WinMM.dll .WAV Remote Denial of Service source: https://www.securityfocus.com/bid/22938/info Microsoft Windows is prone to a denial-of-service vulnerability. A remote attacker may exploit this vulnerability by presenting a malicious WAV file to a victim user. Successful...
Microsoft Windows XP/2000 - 'WinMM.dll' / '.WAV' Remote Denial of Service
source: https://www.securityfocus.com/bid/22938/info Microsoft Windows is prone to a denial-of-service vulnerability. A remote attacker may exploit this vulnerability by presenting a malicious WAV file to a victim user. Successful exploits will result in excessive CPU consumption, effectively...
Policy - .wav File Detection
Binary data 3828.prm...
SoX Local Buffer Overflow Exploiter (Via Crafted WAV File)
No description provided by source. --------------------------------- Begin Code: sox-exploiter.c --------------------------------- / Copyright Rosiello Security 2004 http://www.rosiello.org CVE Reference: CAN-2004-0557 Bug Type: Stack Overflow Date: 01/08/2004 Ulf Harnhammar reported that there a...
CVE-2006-2021
Absolute path traversal vulnerability in recordings/misc/audio.php in the Asterisk Recording Interface ARI web interface in Asterisk@Home before 2.8 allows remote attackers to read arbitrary MP3, WAV, and GSM files via a full pathname in the recording parameter. NOTE: this issue can also be used ...
CVE-2006-2021
Absolute path traversal vulnerability in recordings/misc/audio.php in the Asterisk Recording Interface ARI web interface in Asterisk@Home before 2.8 allows remote attackers to read arbitrary MP3, WAV, and GSM files via a full pathname in the recording parameter. NOTE: this issue can also be used ...
Asterisk Recording Interface 0.7.15 - Audio.php Information Disclosure
Asterisk Recording Interface 0.7.15 - Audio.php Information Disclosure source: https://www.securityfocus.com/bid/17641/info Asterisk Recording Interface is prone to an information-disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input...
Asterisk Recording Interface 0.7.15 - 'Audio.php' Information Disclosure
source: https://www.securityfocus.com/bid/17641/info Asterisk Recording Interface is prone to an information-disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary MP3,...
