Media Player Classic 6.4.9 - FLI File Remote Buffer Overflow

source: https://www.securityfocus.com/bid/25437/info Media Player Classic is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data. Attackers may attempt to exploit this issue by coercing users to access malicious FLI files. Successfull...

DEBIAN-CVE-2007-4483

Cross-site scripting XSS vulnerability in index.php in the WordPress Classic 1.5 theme in WordPress before 2.1.3 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF...

CVE-2007-4483

CVE-2007-4483 affects the WordPress Classic theme (1.5) prior to WordPress 2.1.3. The issue is a cross-site scripting (XSS) flaw in index.php via PATH_INFO (PHP_SELF). Impact: remote attackers can inject arbitrary web script or HTML.Remediation: update the WordPress Classic theme (or apply the fi...

WordPress Classic Theme <= 1.5 - XSS

Because of this vulnerability in index.php, the attackers can inject arbitrary web script or HTML via the PATHINFO. Solution Update the theme...

tfsc-xss.txt

Text File Search Classic ASP Sample Code XSS Vulnerability Software: Text File Search Classic ASP Sample Code download: http://www.aspindir.com/goster/5087 demo: http://www.asp101.com/samples/textfilesearch.asp Found By: GeFORC3 G3 Exploit: This xss works on Text File Search Classic ASP Sample...

Vulnerability in theme WordPress Classic 1.5

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в теме WordPress Classic 1.5. XSS: http://site/index.php/223E3Cscript3Ealertdocument.cookie3C/script3E Уязвимость связана с недостаточной фильтрацией переменной PHPSELF. Подобная уязвимость ранее уже была найдена в...

Multiple applications security vulnerabilities

Mozilla Firefox pop-ups DoS, Microsoft Register Server DoS, FreeWRL ActiveX memory corruption, Nonnoi ASP Barcode files overwrite, Eltima Software VSPAX DoS, Media Player Classic memory corruption, Eltima Software RunService AX DoS, Symantec Norton Ghost ActiveX DoS and code execution,...

CVE-2007-3662

Media Player Classic MPC 6.4.9.0 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted FLV file...

CVE-2007-3663

Divide-by-zero error in Media Player Classic MPC 6.4.9.0 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted MPA file...

Code injection

Media Player Classic MPC 6.4.9.0 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted FLV file...

Input validation

Divide-by-zero error in Media Player Classic MPC 6.4.9.0 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted MPA file...

CVE-2007-3662

Media Player Classic MPC 6.4.9.0 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted FLV file...

CVE-2007-3663

The entry CVE-2007-3663 concerns Media Player Classic (MPC) 6.4.9.0. A divide-by-zero condition in handling MPA files can be triggered by a crafted file, exposing user-assisted remote denial of service and the possibility of arbitrary code execution. The primary affected component is MPC’s MPA fi...

CVE-2007-3662

The CVE-2007-3662 entry affects Media Player Classic (MPC) 6.4.9.0 . It allows a user-assisted remote attacker to trigger a denial of service and potentially execute arbitrary code by opening a crafted FLV file . No exploitation details or patch information are provided in the connected documents...

CVE-2007-3663

Divide-by-zero error in Media Player Classic MPC 6.4.9.0 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted MPA file...

Media Player Classic .MPA除零拒绝服务漏洞

Media Player Classic是一款流行的媒体播放程序。 Media Player Classic不正确处理.mpa文件，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 由于不正确处理MPA扩展媒体文件，当空文件提供给MPC处理时可导致由于除零错误而崩溃。 guliverkli Media Player Classic 6.4.9 0 目前没有解决方案提供： http://guliverkli.sourceforge.net/...

CVE-2007-2723

Media Player Classic 6.4.9.0 allows user-assisted remote attackers to cause a denial of service web browser crash via an "empty" .MPA file, which triggers a divide-by-zero error...

CVE-2007-2723

Media Player Classic 6.4.9.0 is affected. Processing an empty .MPA file triggers a divide-by-zero error, allowing user-assisted remote attackers to cause a denial of service (web browser crash). The available documents confirm the vulnerability and impact but do not provide a concrete patch/versi...

CVE-2007-2723

Media Player Classic 6.4.9.0 allows user-assisted remote attackers to cause a denial of service web browser crash via an "empty" .MPA file, which triggers a divide-by-zero error...

PT-2007-4039 · Mpc Hc Team · Media Player Classic

Name of the Vulnerable Software and Affected Versions: Media Player Classic version 6.4.9.0 Description: The issue allows remote attackers to cause a denial of service, resulting in a web browser crash, by utilizing an "empty" .MPA file. This triggers a divide-by-zero error. Recommendations: For...