CVE-2010-1042

Microsoft Windows Media Player 11 is affected by CVE-2010-1042 due to an error in colorspace conversion when processing crafted .AVI files. The vulnerability can lead to a denial of service (memory corruption) and possibly arbitrary code execution. OpenVAS entries corroborate a Denial of Service ...

CVE-2010-1042

Microsoft Windows Media Player 11 does not properly perform colorspace conversion, which allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted .AVI file. NOTE: the provenance of this information is unknown; the details are obtained...

Microsoft Windows Media Player 11 - .AVI File Colorspace Conversion Remote Memory Corruption

Microsoft Windows Media Player 11 - .AVI File Colorspace Conversion Remote Memory Corruption source: https://www.securityfocus.com/bid/38790/info Microsoft Windows Media Player is prone to a remote memory-corruption vulnerability when handling specially crafted AVI files. An attacker can exploit...

Microsoft Windows Media Player 11 - '.AVI' File Colorspace Conversion Remote Memory Corruption

source: https://www.securityfocus.com/bid/38790/info Microsoft Windows Media Player is prone to a remote memory-corruption vulnerability when handling specially crafted AVI files. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file with the vulnerable...

GOM Player 2.1.21 .avi Denial Of Service

Exploit Title: GOM PLAYER AVI File DoS Date: 14/3/2101 Author: Enigma7 Software Link: www.gomlab.com/eng/‏ Version: V 2.1.21 Tested on: Windows XP SP3 CVE : Code : !/usr/bin/perl print " GOM PLAYER V 2.1.21 -last- DoS .avi file EN|GMA7 Team By Z www.enigma7.net "; $bf =...

Media Player V6.4.9.1 with K-Lite Codec Pack (.avi file) DoS/Crash

Exploit for windows platform in category dos / poc ================================================================== Media Player V6.4.9.1 with K-Lite Codec Pack .avi file DoS/Crash ================================================================== Exploit Title: Media Player V6.4.9.1 with K-Lit...

Media Player 6.4.9.1 with K-Lite Codec Pack - .avi File Crash (Denial of Service)

Media Player 6.4.9.1 with K-Lite Codec Pack - .avi File Crash Denial of Service Exploit Title: Media Player V6.4.9.1 with K-Lite Codec Pack DoS/Crash .avi file Date: 14/3/2010 Author: En|gma7 Software Link: http://www.free-codecs.com/Klitecodecpackdownload.htm Version: Media Player V6.4.9.1 with...

GOM Player v2.1.21 avi File DoS

Exploit for linux platform in category dos / poc =============================== GOM Player v2.1.21 avi File DoS =============================== !/usr/bin/perl print " GOM PLAYER V 2.1.21 -last- DoS .avi file EN|GMA7 Team By Z www.enigma7.net "; $bf =...

GOM Player 2.1.21 - .avi Denial of Service

GOM Player 2.1.21 - .avi Denial of Service !/usr/bin/perl print " GOM PLAYER V 2.1.21 -last- DoS .avi file EN|GMA7 Team By Z www.enigma7.net "; $bf = "\x4D\x54\x68\x64\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00"; openfile, " xploit.avi"; print file $bf; print "\n\n+ Done!\n + AVI file created..\n +...

GOM Player 2.1.21 - '.avi' Denial of Service

!/usr/bin/perl print " GOM PLAYER V 2.1.21 -last- DoS .avi file EN|GMA7 Team By Z www.enigma7.net "; $bf = "\x4D\x54\x68\x64\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00"; openfile, " xploit.avi"; print file $bf; print "\n\n+ Done!\n + AVI file created..\n + Z-at-Enigma7.net\n";...

Microsoft DirectX DirectShow AVI文件解析堆溢出漏洞（MS10-013）

BUGTRAQ ID: 38112 CVE ID: CVE-2010-0250 Microsoft DirectX是Windows操作系统中的一项功能，流媒体在玩游戏或观看视频时通过这个功能支持图形和声音。 DirectX的DirectShow组件（quartz.dll）在解析AVI文件中的特定类型视频流时没有正确的使用分配所用的长度字段，导致分配了不充分的缓冲区。用户打开特制的AVI文件就可以触发堆溢出，导致执行任意代码。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2...

Media Player Classic 6.4.9.1 Buffer Overflow

!/usr/bin/perl Media Player Classic 6.4.9.1 .avi Buffer Overflow Exploit Homepage: http://www.sourceforge.net/projects/guliverkli2/ Exploit Coded by: cr4wl3r From: Indonesia WARNING - WARNING - WARNING - WARNING Disclaimer: The author published the information under the condition that is not in t...

Media Player Classic v6.4.9.1 (.avi) Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl Media Player Classic 6.4.9.1 .avi Buffer Overflow Exploit Homepage: http://www.sourceforge.net/projects/guliverkli2/ Exploit Coded by: cr4wl3r cr4wl3r\x40linuxmail\x2Eorg From: Indonesia WARNING - WARNING - WARNING - WARNING Disclaimer: The author...

Media Player Classic 6.4.9.1 - '.avi' Buffer Overflow

!/usr/bin/perl Media Player Classic 6.4.9.1 .avi Buffer Overflow Exploit Homepage: http://www.sourceforge.net/projects/guliverkli2/ Exploit Coded by: cr4wl3r From: Indonesia WARNING - WARNING - WARNING - WARNING Disclaimer: The author published the information under the condition that is not in t...

FFmpeg多个媒体文件解析拒绝服务和代码执行漏洞

BUGTRAQ ID: 36465 CVE ID: CVE-2009-4631,CVE-2009-4632,CVE-2009-4633,CVE-2009-4634,CVE-2009-4635,CVE-2009-4636,CVE-2009-4637,CVE-2009-4638,CVE-2009-4639,CVE-2009-4640 FFmpeg是一套对音频和视频进行解码录制转换的完整方案。 ffmpeg解析各种媒体文件时存在多个空指针引用、内存越界或死循环等漏洞，可能导致拒绝服务或执行任意代码。 1 解析AVI、.ogv和.wmv文件时的空指针引用和0除数错误可能导致崩溃。 2...

CVE-2010-0250

Heap-based buffer overflow in DirectShow in Microsoft DirectX, as used in the AVI Filter on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2, and in Quartz on Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server...

Heap overflow

Heap-based buffer overflow in DirectShow in Microsoft DirectX, as used in the AVI Filter on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2, and in Quartz on Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server...

CVE-2010-0250

Heap-based buffer overflow in DirectShow in Microsoft DirectX, as used in the AVI Filter on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2, and in Quartz on Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server...

CVE-2010-0250

CVE-2010-0250 is a DirectShow/Quartz heap overflow vulnerability in Microsoft DirectX where the AVI/QUartz AVI parser misallocates a buffer when processing a crafted AVI file’s length field, enabling remote code execution. Affected components include DirectShow (AVI Filter) and Quartz, with impac...

Design/Logic Flaw

The avrescalernd function in the AVI demuxer in FFmpeg 0.5 allows remote attackers to cause a denial of service crash via a crafted AVI file that triggers a divide-by-zero error...