CVE-2007-6402

CVE-2007-6402 is a stack-based buffer overflow affecting Media Player Classic (MPC) up to version 6.4.9 when used with the 3ivx 4.5.1 or 5.0.1 codec. The flaw resides in the mplayerc.exe component and enables a remote attacker to execute arbitrary code via a crafted .mp4 file. Related entry: CVE-...

CVE-2007-6402

Stack-based buffer overflow in mplayerc.exe in Media Player Classic MPC 6.4.9, when used with the 3ivx 4.5.1 or 5.0.1 codec, allows remote attackers to execute arbitrary code via a certain .mp4 file, possibly a related issue to CVE-2007-6401...

Media Player Classic 6.4.9 MP4 Stack Overflow 0-day

!/bin/perl Media Player Classic 6.4.9 MP4 Stack Overflow 0-day discovered and exploited by SYS 49152 Tested on win XP SP2 ENG Shell on port 49152 usage: - download this codec in order to manage MP4 content: http://www.3ivx.com/coral/3ivxd4451win.exe - open the MP4 file with mplayerc.exe SYS 49152...

Media Player Classic 6.4.9 MP4 File Stack Overflow Exploit

No description provided by source. !/bin/perl Media Player Classic 6.4.9 MP4 Stack Overflow 0-day discovered and exploited by SYS 49152 Tested on win XP SP2 ENG Shell on port 49152 usage: - download this codec in order to manage MP4 content: http://www.3ivx.com/coral/3ivxd4451win.exe...

Media Player Classic 6.4.9 - .MP4 File Stack Overflow

Media Player Classic 6.4.9 - .MP4 File Stack Overflow !/bin/perl Media Player Classic 6.4.9 MP4 Stack Overflow 0-day discovered and exploited by SYS 49152 Tested on win XP SP2 ENG Shell on port 49152 usage: - download this codec in order to manage MP4 content:...

mpc-overflow.txt

!/bin/perl Media Player Classic 6.4.9 MP4 Stack Overflow 0-day discovered and exploited by SYS 49152 Tested on win XP SP2 ENG Shell on port 49152 usage: - download this codec in order to manage MP4 content: http://www.3ivx.com/coral/3ivxd4451win.exe - open the MP4 file with mplayerc.exe SYS 49152...

Media Player Classic 6.4.9 - '.MP4' File Stack Overflow

!/bin/perl Media Player Classic 6.4.9 MP4 Stack Overflow 0-day discovered and exploited by SYS 49152 Tested on win XP SP2 ENG Shell on port 49152 usage: - download this codec in order to manage MP4 content: http://www.3ivx.com/coral/3ivxd4451win.exe - open the MP4 file with mplayerc.exe SYS 49152...

Media Player Classic 6.4.9 MP4 File Stack Overflow Exploit

Exploit for unknown platform in category local exploits ========================================================== Media Player Classic 6.4.9 MP4 File Stack Overflow Exploit ========================================================== !/bin/perl Media Player Classic 6.4.9 MP4 Stack Overflow 0-day...

CVE-2007-5312

Cross-site scripting XSS vulnerability in TorrentTrader Classic 1.07 allows remote attackers to inject arbitrary web script or HTML via the 1 color parameter to pjirc/css.php and the 2 cat parameter to browse.php...

Cross site scripting

Cross-site scripting XSS vulnerability in TorrentTrader Classic 1.07 allows remote attackers to inject arbitrary web script or HTML via the 1 color parameter to pjirc/css.php and the 2 cat parameter to browse.php...

CVE-2007-5311

Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic Edition 1.07 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the ssuri parameter...

CVE-2007-5311

CVE-2007-5311 concerns TorrentTrader Classic Edition 1.07. The vulnerability is in the backend/admin-functions.php component and is triggered by a directory traversal through a .. (dot dot) in the ss_uri parameter, allowing remote attackers to cause inclusion and execution of arbitrary local file...

CVE-2007-5312

TorrentTrader Classic 1.07 is affected by a cross-site scripting (XSS) vulnerability. An attacker can inject arbitrary script/HTML via the (1) color parameter to pjirc/css.php and (2) the cat parameter to browse.php, indicating insufficient input sanitization for these parameters. No remediation ...

TorrentTrader Classic 1.07 Multiple Remote Vulnerabilities

No description provided by source. TorrentTrader Classic Mutiple Remote vulnerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Tested on TorrentTrader Classic v1.07 local file inclusion...

TorrentTrader Classic 1.07 - Multiple Vulnerabilities

TorrentTrader Classic Mutiple Remote vulnerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Tested on TorrentTrader Classic v1.07 local file inclusion backend/admin-functions.php?ssuri=dd Xss...

torrent-xsslfi.txt

Hello,, TorrentTrader Classic Mutiple Remote vulnerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Tested on TorrentTrader Classic v1.07 local file inclusion backend/admin-functions.php?ssuri=dd Xss...

TorrentTrader Classic Mutiple Remote vulnerabilities

Hello,, TorrentTrader Classic Mutiple Remote vulnerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Tested on TorrentTrader Classic v1.07 local file inclusion backend/admin-functions.php?ssuri=dd Xss...

Unfixed XSS vulnerability at www.classicwebdevelopment.com

Security researcher OMEHA, has submitted on 10/05/2007 a cross-site-scripting XSS vulnerability affecting www.classicwebdevelopment.com, which at the time of submission ranked 4190254 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/05/2007. ...

Integer overflow

Multiple integer overflows in Media Player Classic MPC 6.4.9.0 and earlier, as used standalone and in mympc aka CD-Storm 1.0.0.1, StormPlayer 1.0.4, and possibly other products, allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a .avi fil...

Heap overflow

Heap-based buffer overflow in mplayerc.exe in Media Player Classic MPC 6.4.9.0 and earlier, as used standalone and in mympc aka CD-Storm 1.0.0.1, StormPlayer 1.0.4, and possibly other products, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary co...