Media Player Classic畸形AVI头字段数据多个远程漏洞

Media Player Classic是一款流行的媒体播放器。 Media Player Classic处理AVI文件头部数据存在问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 构建包含畸形头字段的AVI文件，诱使用户使用MPC打开，可导致发生缓冲区溢出，可导致拒绝服务或者以应用程序权限执行任意指令。 guliverkli Media Player Classic 6.4.9 0 目前没有详细解决方案提供： http://sourceforge.net/projects/guliverkli/ 69 6E 64 78 FF FF FF FF 01 00 64 73 20 00...

CVE-2007-4884: Undefined Security Weakness

Media Player Classic MPC allows user-assisted remote attackers to cause a denial of service application crash via a malformed .au file that triggers a divide-by-zero error...

CVE-2007-4884

Media Player Classic MPC allows user-assisted remote attackers to cause a denial of service application crash via a malformed .au file that triggers a divide-by-zero error...

CAL-20070912-1 Multiple vendor produce handling AVI file vulnerabilities

CAL-20070912-1 Multiple vendor produce handling AVI file vulnerabilities Code Audit Labs http://www.vulnhunt.com Code Audit for some popular media player and discovered some vulnerabilities. one heap overflow was discovered in MPlayer. one heap overflow and one integer overflow were discovered in...

Media Player Classic 6.4.9 - Malformed AVI Header Multiple Remote Vulnerabilities

Media Player Classic 6.4.9 - Malformed AVI Header Multiple Remote Vulnerabilities source: https://www.securityfocus.com/bid/25650/info Media Player Classic MPC is prone to multiple remote vulnerabilities, including a heap-based buffer-overflow issue and an integer-overflow issue, when handling...

Media Player Classic 6.4.9 - Malformed AVI Header Multiple Remote Vulnerabilities

source: https://www.securityfocus.com/bid/25650/info Media Player Classic MPC is prone to multiple remote vulnerabilities, including a heap-based buffer-overflow issue and an integer-overflow issue, when handling malformed AVI files. An attacker can exploit these issues to execute arbitrary code...

[SECURITY] Fedora 7 Update: vavoom-1.24-3.fc7

Vavoom is an enhanced open-source port of Doom. Allowing you to play not on ly the classic 3D first-person shooter Doom, but also the Doom derived classics Heretic, Hexen and Strife. Compared to the original games it adds extra features such as translucency and freelook support and ofcourse the...

CVE-2006-7222

Buffer overflow in the CFLICStream::deltachunk function in FLICSource.cpp in Media Player Classic MPC 6.4.9.0 allows user-assisted remote attackers to execute arbitrary code via a crafted FLI file...

CVE-2006-7222

The CVE-2006-7222 entry affects Media Player Classic (MPC) 6.4.9.0 . The vulnerability is a buffer overflow in the function CFLICStream::_deltachunk of FLICSource.cpp, enabling a remote attacker to execute arbitrary code when processing a crafted FLI file . The description indicates the vector is...

Media Player Classic FLI文件处理远程缓冲区溢出漏洞

BUGTRAQ ID: 25437 Media Player Classic是一个免费的基于WMP的播放程序，支持几乎所有媒体格式。 Media Player Classic处理fli文件时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制客户端。 在FLICSource.cpp文件中的以下函数： 690 void CFLICStream::deltachunk 691 692 BYTE tmp = mpFrameBuffer; //mpFrameBuffer 的长度为mhdr.xmhdr.y323， //注意mhdr.x，mhdr.y是从一个fli文件中读出的,是我们能控制的 693 6...

CVE-2006-7222: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the CFLICStream::deltachunk function in FLICSource.cpp in Media Player Classic MPC 6.4.9.0 allows user-assisted remote attackers to execute arbitrary code via a crafted FLI file...

Media Player Classic 6.4.9 - FLI File Remote Buffer Overflow

Media Player Classic 6.4.9 - FLI File Remote Buffer Overflow source: https://www.securityfocus.com/bid/25437/info Media Player Classic is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data. Attackers may attempt to exploit this issue...

Media Player Classic 6.4.9 - FLI File Remote Buffer Overflow

source: https://www.securityfocus.com/bid/25437/info Media Player Classic is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data. Attackers may attempt to exploit this issue by coercing users to access malicious FLI files. Successfull...

DEBIAN-CVE-2007-4483

Cross-site scripting XSS vulnerability in index.php in the WordPress Classic 1.5 theme in WordPress before 2.1.3 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF...

CVE-2007-4483

CVE-2007-4483 affects the WordPress Classic theme (1.5) prior to WordPress 2.1.3. The issue is a cross-site scripting (XSS) flaw in index.php via PATH_INFO (PHP_SELF). Impact: remote attackers can inject arbitrary web script or HTML.Remediation: update the WordPress Classic theme (or apply the fi...

CVE-2007-4483: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in the WordPress Classic 1.5 theme in WordPress before 2.1.3 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF...

WordPress Classic Theme <= 1.5 - XSS

Because of this vulnerability in index.php, the attackers can inject arbitrary web script or HTML via the PATHINFO. Solution Update the theme...

CVE-2007-4431: Undefined Security Weakness

Cross-domain vulnerability in Apple Safari for Windows 3.0.3 and earlier allows remote attackers to bypass the Same Origin Policy, with access from local zones to external domains, via a certain body.innerHTML property value, aka "classic JavaScript frame hijacking."...

CVE-2007-4434: Undefined Security Weakness

Cross-site scripting XSS vulnerability in textfilesearch.asp in the Text File Search ASP Classic edition allows remote attackers to inject arbitrary web script or HTML via the query parameter...

tfsc-xss.txt

Text File Search Classic ASP Sample Code XSS Vulnerability Software: Text File Search Classic ASP Sample Code download: http://www.aspindir.com/goster/5087 demo: http://www.asp101.com/samples/textfilesearch.asp Found By: GeFORC3 G3 Exploit: This xss works on Text File Search Classic ASP Sample...