Microsoft Animation ActiveX Control Malformed AVI Parsing Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code through vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists within the Microsoft Animation...

Microsoft Windows Common AVI ActiveX Control File Parsing Buffer Overflow Vulnerability

Description Microsoft Windows Common AVI ActiveX control is prone to a remote buffer-overflow vulnerability. Remote attackers can exploit this issue to execute arbitrary code in the context of the application using the ActiveX control typically Internet Explorer. Successful exploits will compromi...

Design/Logic Flaw

MPlayer, possibly 1.0rc1, allows remote attackers to cause a denial of service SIGSEGV and application crash via 1 a malformed MP3 file, as demonstrated by lol-mplayer.mp3; 2 a malformed Ogg Vorbis file, as demonstrated by lol-mplayer.ogg; 3 a malformed MPEG-1 file, as demonstrated by...

CVE-2007-6718

MPlayer, possibly 1.0rc1, allows remote attackers to cause a denial of service SIGSEGV and application crash via 1 a malformed MP3 file, as demonstrated by lol-mplayer.mp3; 2 a malformed Ogg Vorbis file, as demonstrated by lol-mplayer.ogg; 3 a malformed MPEG-1 file, as demonstrated by...

mplayer -- Multiple integer overflows

The remote host is missing an update to the system as announced in the referenced advisory. VID c7526a14-c4dc-11da-9699-00123ffe8333 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Code injection

Multiple unspecified vulnerabilities in GraphicsMagick before 1.2.4 allow remote attackers to cause a denial of service crash, infinite loop, or memory consumption via a unspecified vectors in the 1 AVI, 2 AVS, 3 DCM, 4 EPT, 5 FITS, 6 MTV, 7 PALM, 8 RLA, and 9 TGA decoder readers; and b the...

GraphicsMagick多个拒绝服务漏洞

BUGTRAQ ID: 30055 GraphicsMagick是一个简单的图像处理工具。 GraphicsMagick的AVI、AVS、DCM、EPT、FITS、MTV、PALM、RLA和TGA解码器中存在多个漏洞，可能触发崩溃、分配过多内存或执行死循环。 GraphicsMagick的magick/image.c文件中的GetImageCharacteristics函数中存在漏洞，如果用户受骗打开了特制的PNG、JPEG、BMP或TIFF文件的话，就会导致崩溃。 GraphicsMagick Group GraphicsMagick 1.2.3 GraphicsMagick Grou...

Spoofing

Microsoft DirectX 8.1 through 9.0c, and DirectX on Microsoft XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, does not properly perform MJPEG error checking, which allows remote attackers to execute arbitrary code via a crafted MJPEG stream in a 1 AVI or 2 ASF file, a...

CVE-2008-0011

Microsoft DirectX 8.1 through 9.0c, and DirectX on Microsoft XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, does not properly perform MJPEG error checking, which allows remote attackers to execute arbitrary code via a crafted MJPEG stream in a 1 AVI or 2 ASF file, a...

DivX Player 6.6.0 SRT File SEH Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ====================================================== DivX Player 6.6.0 SRT File SEH Buffer Overflow Exploit ====================================================== !/usr/bin/python DivX 6.6 SRT SEH overwrite PoC Tested on XP SP2 Coded by Ma...

divx66.py.txt

!/usr/bin/python DivX 6.6 SRT SEH overwrite PoC Tested on XP SP2 Coded by Mati Aharoni, aka muts and Chris Hadnagy, aka loganWHD muts..at..offensive-security...dot..com chris..at..offensive-security...dot..com http://www.offensive-security.com/0day/divx66.py.txt Notes: Unicode buffer - real pita...

VLC <= 0.8.6e Subtitle Parsing Local Buffer Overflow Exploit

No description provided by source. / VLC =0.8.6.e Subtitle parsing local buffer overflow exploit Creadit to [email protected] vs Look2Me @ Tested on windows XP Pro SP2 / include stdio.h include stdlib.h include string.h char ssaheader= "Script Info\r\n" "Title: VLC = 0.8.6c,e buffer-overflow\r\n"...

VideoLAN VLC Media Player 0.8.6e - Subtitle Parsing Local Buffer Overflow

/ VLC include include char ssaheader= "Script Info\r\n" "Title: VLC version 8.06.c\r\n"; printf"2 version 8.06.d\r\n"; printf"3 version 8.06.e\r\nChose:"; j=getchar; switchj...

Debian: Security Advisory (DSA-1215-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1215-1 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory DSA 1215-1. Several remote vulnerabilities have been discovered in the Xine multimedia library, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following...

jetAudio 7.0.5 COWON Media Center MP4 Stack Overflow Exploit

No description provided by source. !/bin/perl jetAudio 7.0.5 COWON Media Center MP4 Stack Overflow 0-day discovered and exploited by SYS 49152 Tested on win XP SP2 ENG Shell on port 49152 usage: - download the latest 3ivx codec from here: hxxp://www.3ivx.com/codec/3ivxMPEG-4501trialwin.exe - play...

jetaudio-overflow.txt

another vulnerable application. !/bin/perl jetAudio 7.0.5 COWON Media Center MP4 Stack Overflow 0-day discovered and exploited by SYS 49152 Tested on win XP SP2 ENG Shell on port 49152 usage: - download the latest 3ivx codec from here: hxxp://www.3ivx.com/codec/3ivxMPEG-4501trialwin.exe - play th...

jetAudio 7.0.5 COWON Media Center MP4 Stack Overflow Exploit

Exploit for unknown platform in category local exploits ============================================================ jetAudio 7.0.5 COWON Media Center MP4 Stack Overflow Exploit ============================================================ !/bin/perl jetAudio 7.0.5 COWON Media Center MP4 Stack...

Update Protection against Microsoft AVI File Parsing Remote Code Execution Vulnerability (MS07-064)

A remote code execution vulnerability has been reported in Microsoft DirectX. Microsoft DirectX is a set of libraries that aim for accelerated video and audio experience on Microsoft Windows operating system. DirectX can parse various file formats which include AVI files. A remote attacker can...

jetAudio 7.0.5 COWON Media Center MP4 - Local Stack Overflow

!/bin/perl jetAudio 7.0.5 COWON Media Center MP4 Stack Overflow 0-day discovered and exploited by SYS 49152 Tested on win XP SP2 ENG Shell on port 49152 usage: - download the latest 3ivx codec from here: hxxp://www.3ivx.com/codec/3ivxMPEG-4501trialwin.exe - play the AVI file with COWON Media Cent...