2916 matches found
CAL-20070912-1 Multiple vendor produce handling AVI file vulnerabilities
CAL-20070912-1 Multiple vendor produce handling AVI file vulnerabilities Code Audit Labs http://www.vulnhunt.com Code Audit for some popular media player and discovered some vulnerabilities. one heap overflow was discovered in MPlayer. one heap overflow and one integer overflow were discovered in...
Media Player Classic 6.4.9 - Malformed AVI Header Multiple Remote Vulnerabilities
Media Player Classic 6.4.9 - Malformed AVI Header Multiple Remote Vulnerabilities source: https://www.securityfocus.com/bid/25650/info Media Player Classic MPC is prone to multiple remote vulnerabilities, including a heap-based buffer-overflow issue and an integer-overflow issue, when handling...
Media Player Classic 6.4.9 - Malformed AVI Header Multiple Remote Vulnerabilities
source: https://www.securityfocus.com/bid/25650/info Media Player Classic MPC is prone to multiple remote vulnerabilities, including a heap-based buffer-overflow issue and an integer-overflow issue, when handling malformed AVI files. An attacker can exploit these issues to execute arbitrary code...
[SECURITY] Fedora 7 Update: vavoom-1.24-3.fc7
Vavoom is an enhanced open-source port of Doom. Allowing you to play not on ly the classic 3D first-person shooter Doom, but also the Doom derived classics Heretic, Hexen and Strife. Compared to the original games it adds extra features such as translucency and freelook support and ofcourse the...
CVE-2006-7222
The CVE-2006-7222 entry affects Media Player Classic (MPC) 6.4.9.0 . The vulnerability is a buffer overflow in the function CFLICStream::_deltachunk of FLICSource.cpp, enabling a remote attacker to execute arbitrary code when processing a crafted FLI file . The description indicates the vector is...
CVE-2006-7222
Buffer overflow in the CFLICStream::deltachunk function in FLICSource.cpp in Media Player Classic MPC 6.4.9.0 allows user-assisted remote attackers to execute arbitrary code via a crafted FLI file...
Media Player Classic FLI文件处理远程缓冲区溢出漏洞
BUGTRAQ ID: 25437 Media Player Classic是一个免费的基于WMP的播放程序，支持几乎所有媒体格式。 Media Player Classic处理fli文件时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制客户端。 在FLICSource.cpp文件中的以下函数： 690 void CFLICStream::deltachunk 691 692 BYTE tmp = mpFrameBuffer; //mpFrameBuffer 的长度为mhdr.xmhdr.y323， //注意mhdr.x，mhdr.y是从一个fli文件中读出的,是我们能控制的 693 6...
Media Player Classic 6.4.9 - FLI File Remote Buffer Overflow
Media Player Classic 6.4.9 - FLI File Remote Buffer Overflow source: https://www.securityfocus.com/bid/25437/info Media Player Classic is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data. Attackers may attempt to exploit this issue...
Media Player Classic 6.4.9 - FLI File Remote Buffer Overflow
source: https://www.securityfocus.com/bid/25437/info Media Player Classic is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data. Attackers may attempt to exploit this issue by coercing users to access malicious FLI files. Successfull...
DEBIAN-CVE-2007-4483
Cross-site scripting XSS vulnerability in index.php in the WordPress Classic 1.5 theme in WordPress before 2.1.3 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF...
CVE-2007-4483
CVE-2007-4483 affects the WordPress Classic theme (1.5) prior to WordPress 2.1.3. The issue is a cross-site scripting (XSS) flaw in index.php via PATH_INFO (PHP_SELF). Impact: remote attackers can inject arbitrary web script or HTML.Remediation: update the WordPress Classic theme (or apply the fi...
WordPress Classic Theme <= 1.5 - XSS
Because of this vulnerability in index.php, the attackers can inject arbitrary web script or HTML via the PATHINFO. Solution Update the theme...
tfsc-xss.txt
Text File Search Classic ASP Sample Code XSS Vulnerability Software: Text File Search Classic ASP Sample Code download: http://www.aspindir.com/goster/5087 demo: http://www.asp101.com/samples/textfilesearch.asp Found By: GeFORC3 G3 Exploit: This xss works on Text File Search Classic ASP Sample...
Vulnerability in theme WordPress Classic 1.5
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в теме WordPress Classic 1.5. XSS: http://site/index.php/223E3Cscript3Ealertdocument.cookie3C/script3E Уязвимость связана с недостаточной фильтрацией переменной PHPSELF. Подобная уязвимость ранее уже была найдена в...
Multiple applications security vulnerabilities
Mozilla Firefox pop-ups DoS, Microsoft Register Server DoS, FreeWRL ActiveX memory corruption, Nonnoi ASP Barcode files overwrite, Eltima Software VSPAX DoS, Media Player Classic memory corruption, Eltima Software RunService AX DoS, Symantec Norton Ghost ActiveX DoS and code execution,...
CVE-2007-3662
Media Player Classic MPC 6.4.9.0 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted FLV file...
CVE-2007-3663
Divide-by-zero error in Media Player Classic MPC 6.4.9.0 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted MPA file...
Input validation
Divide-by-zero error in Media Player Classic MPC 6.4.9.0 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted MPA file...