Design/Logic Flaw

Unspecified vulnerability in Microsoft Windows Media Player 11 allows remote attackers to execute arbitrary code via a crafted audio-only file that is streamed from a Server-Side Playlist SSPL on Windows Media Server, aka "Windows Media Player Sampling Rate Vulnerability."...

Microsoft Windows Media Player SSPL文件远程代码执行漏洞（MS08-054）

BUGTRAQ ID: 30550 CVE ID：CVE-2008-2253 CNCVE ID：CNCVE-20082253 Microsoft Windows Media Player是一款流行的媒体播放程序。 Microsoft Windows Media Player处理样取样速率存在缓冲区溢出，远程攻击者可以利用漏洞构建特殊音频文件触发此漏洞，可导致以应用程序权限执行任意指令。 目前没有详细漏洞细节提供。 Microsoft Windows Media Player 11 可参考如下临时解决方案： -反注册wmpeffects.dll： 在32-bit Windows系统下:...

Windows Media Player 11 Remote Code Execution Vulnerability (954154)

This host is missing a critical security update according to Microsoft Bulletin MS08-054. OpenVAS Vulnerability Test $Id: secpodms08-054900045.nasl 5863 2017-04-05 07:38:11Z antu123 $ Description: Windows Media Player 11 Remote Code Execution Vulnerability 954154 Authors: Chandan S Copyright:...

MS08-054: Vulnerability in Windows Media Player Could Allow Remote Code Execution (954154)

The remote host is running Windows Media Player 11. There is a vulnerability in the remote version of this software that could allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, the attacker would need to set up a rogue audio file and send it to a victim on the...

Fedora 8 : libvorbis-1.2.0-2.fc8 (2008-3934)

Will Drewry of the Google Security Team reported several flaws in the way libvorbis processed audio data. An attacker could create a carefully crafted OGG audio file in such a way that it could cause an application linked with libvorbis to crash, or execute arbitrary code when it was opened...

wireshark mp3 and ncp flaws

Multiple unspecified vulnerabilities in Wireshark formerly Ethereal allow remote attackers to cause a denial of service crash via 1 a crafted MP3 file or 2 unspecified vectors to the NCP dissector...

DSA-1471-1 libvorbis - several vulnerabilities

Bulletin has no description...

TuMusika Evolution 1.7R5 Remote File Disclosure Vulnerability

No description provided by source. TuMusika Evolution 1.7R5 Remote File Disclosure Vulnerability Script : http://sourceforge.net/project/platformdownload.php?groupid=186000 /frames/nogui/scdownload.php ? $file = $GET'uri' ;---xxx $title = $GET'title' ; header'HTTP/1.1 200 OK';...

DEBIAN-CVE-2007-6111

Multiple unspecified vulnerabilities in Wireshark formerly Ethereal allow remote attackers to cause a denial of service crash via 1 a crafted MP3 file or 2 unspecified vectors to the NCP dissector...

About the audio file denial of service attacks-vulnerability warning-the black bar safety net

0 6 the end of the year, I and Secunia maillist friends discuss when abroad of a friend to modify a Windows Media on the denial of service attack PoC, but at the time this is not a concern, I and this friend just a simple exchange, release out on the end, and then didn't take it to heart. The tim...

Buffer overflow

Buffer overflow in jetAudio 6.2.6.8330 Basic, and possibly other versions, allows user-assisted attackers to execute arbitrary code via an audio file such as WMA with long ID Tag values including 1 Title, 2 Author, and 3 Album, which triggers the overflow in the tooltip display string if the soun...

CVE-2006-2910

Buffer overflow in jetAudio 6.2.6.8330 Basic, and possibly other versions, allows user-assisted attackers to execute arbitrary code via an audio file such as WMA with long ID Tag values including 1 Title, 2 Author, and 3 Album, which triggers the overflow in the tooltip display string if the soun...

CVE-2006-2910

Buffer overflow in jetAudio 6.2.6.8330 Basic, and possibly other versions, allows user-assisted attackers to execute arbitrary code via an audio file such as WMA with long ID Tag values including 1 Title, 2 Author, and 3 Album, which triggers the overflow in the tooltip display string if the soun...

CVE-2006-2910

CVE-2006-2910 describes a buffer overflow in jetAudio 6.2.6.8330 (Basic) and possibly other versions. The vulnerability is triggered when an audio file (e.g., WMA) contains long ID3 tag values for Title, Author, or Album, causing an overflow in the tooltip display string if the sound card driver ...

DEBIAN-CVE-2006-2230

Multiple format string vulnerabilities in xiTK xitk/main.c in xine 0.99.4 might allow attackers to cause a denial of service via format string specifiers in an MP3 filename specified on the command line. NOTE: this is a different vulnerability than CVE-2006-1905. In addition, if the only attack...

RealPlayer media player buffer overflow

Buffer overflow on RAM real media audio files parsing...

Real Player real audio files buffer overflow

Buffer overflow on .ra files parsing...

CVE-2004-0805

Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg123 0.59s allows remote attackers to execute arbitrary code via a certain 1 mp3 or 2 mp2 file...

DSA-565-1 sox - buffer overflows

Bulletin has no description...

CVE-1999-1263: Undefined Security Weakness

Metamail before 2.7-7.2 allows remote attackers to overwrite arbitrary files via an e-mail message containing a uuencoded attachment that specifies the full pathname for the file to be modified, which is processed by uuencode in Metamail scripts such as sun-audio-file...