CVE-2009-3201

Integer overflow in Media Player Classic 6.4.9 allows user-assisted remote attackers to cause a denial of service application crash via a MIDI file .mid with a malformed header, which triggers a buffer overflow, a different vulnerability than CVE-2007-4940...

CVE-2009-3201

CVE-2009-3201 affects Media Player Classic 6.4.9. The vulnerability is described as an integer/buffer overflow triggered by a malformed MIDI header in a MIDI file, leading to a denial of service (application crash). The primary public description specifies user-assisted remote denial of service, ...

CVE-2009-3201: Undefined Security Weakness

Integer overflow in Media Player Classic 6.4.9 allows user-assisted remote attackers to cause a denial of service application crash via a MIDI file .mid with a malformed header, which triggers a buffer overflow, a different vulnerability than CVE-2007-4940...

Media Player Classic 6.4.9 Integer Overflow

! /usr/bin/perl print qq Iranian Pentesters Home Www.Pentesters.Ir PLATEN - H.jafari - Media Player Classic 6.4.9.mid Integer Overflow PoC Vulnerability Discovered By : PLATEN E-mail && blog: hjafari.blogspot.com platen.secureatgmaildotcom Greetings: Cru3l.b0y, b3hz4d, Cdef3nder and all members i...

Media Player Classic 6.4.9 - .mid Integer Overflow (PoC)

Media Player Classic 6.4.9 - .mid Integer Overflow PoC ! /usr/bin/perl print qq Iranian Pentesters Home Www.Pentesters.Ir PLATEN - H.jafari - Media Player Classic 6.4.9.mid Integer Overflow PoC Vulnerability Discovered By : PLATEN E-mail && blog: hjafari.blogspot.com platen.secureatgmaildotcom...

Media Player Classic 6.4.9 (.mid) Integer Overflow PoC

Exploit for unknown platform in category dos / poc ====================================================== Media Player Classic 6.4.9 .mid Integer Overflow PoC ====================================================== ! /usr/bin/perl print qq Iranian Pentesters Home Www.Pentesters.Ir PLATEN - H.jafar...

Media Player Classic 6.4.9 (.mid) Integer Overflow PoC

No description provided by source. ! /usr/bin/perl print qq Iranian Pentesters Home Www.Pentesters.Ir PLATEN - H.jafari - Media Player Classic 6.4.9.mid Integer Overflow PoC Vulnerability Discovered By : PLATEN E-mail && blog: hjafari.blogspot.com platen.secureatgmaildotcom Greetings: Cru3l.b0y,...

Media Player Classic 6.4.9 - '.mid' Integer Overflow (PoC)

!/usr/bin/perl print qq Iranian Pentesters Home Www.Pentesters.Ir PLATEN - H.jafari - Media Player Classic 6.4.9.mid Integer Overflow PoC Vulnerability Discovered By : PLATEN E-mail && blog: hjafari.blogspot.com platen.secureatgmaildotcom Greetings: Cru3l.b0y, b3hz4d, Cdef3nder and all members in...

[SECURITY] Fedora 11 Update: firebird-2.1.3.18185.0-2.fc11

This package contains common files between firebird-classic and firebird-superserver. You will need this if you want to use either one...

[SECURITY] Fedora 10 Update: firebird-2.1.3.18185.0-2.fc10

This package contains common files between firebird-classic and firebird-superserver. You will need this if you want to use either one...

TorrentTrader Classic Multiple Vulnerabilities

TorrentTrader Classic is prone to multiple vulnerabilities. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

TorrentTrader Classic Version Detection

This script detects the installed version of TorrentTrader Classic. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-2161

Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic 1.09, when used on a case-insensitive web site, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the ssuri parameter, in conjunction with a modified component name...

CVE-2009-2160

TorrentTrader Classic 1.09 allows remote attackers to 1 obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function; and allows remote attackers to 2 obtain other potentially sensitive information via a direct request to check.php...

CVE-2009-2159

backup-database.php in TorrentTrader Classic 1.09 does not require administrative authentication, which allows remote attackers to create and download a backup database by making a direct request and then retrieving a .gz file from backups/...

CVE-2009-2156

Multiple cross-site scripting XSS vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to inject arbitrary web script or HTML via 1 the Title field to requests.php, related to viewrequests.php; and 2 the Torrent Name field to torrents-upload.php, related to the logging o...

Default credentials

account-recover.php in TorrentTrader Classic 1.09 chooses random passwords from an insufficiently large set, which makes it easier for remote attackers to obtain a password via a brute-force attack...

Directory traversal

Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic 1.09, when used on a case-insensitive web site, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the ssuri parameter, in conjunction with a modified component name...

CVE-2009-2157

Multiple SQL injection vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to execute arbitrary SQL commands via 1 the origmsg parameter to account-inbox.php; the categ parameter to 2 delreq.php and 3 admin-delreq.php; 4 the choice parameter to index.php; 5 the id...

CVE-2009-2158

account-recover.php in TorrentTrader Classic 1.09 chooses random passwords from an insufficiently large set, which makes it easier for remote attackers to obtain a password via a brute-force attack...