961 matches found
Microsoft Windows Media Player DVR-MS File Code Execution
Added: 03/14/2011 CVE: CVE-2011-0042 BID: 46680 OSVDB: 71016 Background Windows Media Player is an audio and video media player for Windows platforms. Problem A file parsing error in Windows Media Player allows command execution when a user opens a specially crafted Digital Video Recording DVR-MS...
CVE-2011-0042
SBE.dll in the Stream Buffer Engine in Windows Media Player and Windows Media Center in Microsoft Windows XP SP2 and SP3, Windows XP Media Center Edition 2005 SP3, Windows Vista SP1 and SP2, Windows 7 Gold and SP1, and Windows Media Center TV Pack for Windows Vista does not properly parse Digital...
Design/Logic Flaw
SBE.dll in the Stream Buffer Engine in Windows Media Player and Windows Media Center in Microsoft Windows XP SP2 and SP3, Windows XP Media Center Edition 2005 SP3, Windows Vista SP1 and SP2, Windows 7 Gold and SP1, and Windows Media Center TV Pack for Windows Vista does not properly parse Digital...
CVE-2011-0042
The CVE-2011-0042 issue affects Windows Media Player/Windows Media Center where SBE.dll in the Stream Buffer Engine mis-parses DVR-MS files. This parsing flaw can enable remote code execution via a crafted DVR-MS file on multiple Windows versions (XP SP2/SP3, XP MCE 2005 SP3, Vista SP1/SP2, Windo...
CVE-2011-0042
SBE.dll in the Stream Buffer Engine in Windows Media Player and Windows Media Center in Microsoft Windows XP SP2 and SP3, Windows XP Media Center Edition 2005 SP3, Windows Vista SP1 and SP2, Windows 7 Gold and SP1, and Windows Media Center TV Pack for Windows Vista does not properly parse Digital...
PT-2011-2039 · Microsoft · Windows Media Player +2
Name of the Vulnerable Software and Affected Versions: Windows Media Player and Windows Media Center versions prior to the fixed version Description: A remote code execution issue exists in the way Windows Media Player and Windows Media Center handle Digital Video Recording .dvr-ms files. This...
Microsoft Windows multiple security vulnerabilities
Unsafe library loading, code execution with .dvr-ms files...
Microsoft Windows Media Remote Code Execution Vulnerabilities (2510030)
This host is missing a critical security update according to Microsoft Bulletin MS11-015. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2011-0042: Improper Input Validation
SBE.dll in the Stream Buffer Engine in Windows Media Player and Windows Media Center in Microsoft Windows XP SP2 and SP3, Windows XP Media Center Edition 2005 SP3, Windows Vista SP1 and SP2, Windows 7 Gold and SP1, and Windows Media Center TV Pack for Windows Vista does not properly parse Digital...
Microsoft Windows Media Player DVR-MS Files Code Execution (MS11-015; CVE-2011-0042)
DVR-MS Microsoft Digital Video Recording is a proprietary video and audio file container format, developed by Microsoft used for storing TV content recorded by Windows XP Media Center Edition, Windows Vista and Windows 7. A remote code execution vulnerability has been reported in the way Windows...
MS11-015: Vulnerabilities in Windows Media Could Allow Remote Code Execution (2510030)
The remote Windows host has at least one of the following vulnerabilities in Media Player or Media Center : - DirectShow does not adequately restrict the path used for loading external libraries. A remote attacker could exploit this by tricking a user into opening a specially crafted file,...
eyeMax DVR Server Detection
eyeMax DVR Server is running on this port. This service controls network cameras, typically for a CCTV network. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid47135; scriptversion"1.5";...
Authentication flaw
The web interface for Everfocus EDR1600 DVR allows remote attackers to bypass authentication and access live cams via certain vectors...
CVE-2009-3828
The web interface for Everfocus EDR1600 DVR allows remote attackers to bypass authentication and access live cams via certain vectors...
CVE-2009-3828
CVE-2009-3828 describes an authentication bypass in the web interface of the Everfocus EDR1600 DVR, allowing remote attackers to access live cameras via unspecified vectors. The public records here confirm the affected product (Everfocus EDR1600 DVR) and the root cause (authentication bypass) wit...
CVE-2009-3828: Improper Authentication
The web interface for Everfocus EDR1600 DVR allows remote attackers to bypass authentication and access live cams via certain vectors...
Everfocus EDR1600 remote authentication bypass
Product: Everfocus EDR1600 Version affected: all Website: http://www.everfocus.com/ Discovered By: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it Vuln: remote DVR authentication bypass The EDR1600 firmware don't handle correctly users authentication and sessions...
Everfocus <= 1.4 EDSR Remote Authentication Bypass
Exploit for unknown platform in category web applications ================================================== Everfocus = 1.4 EDSR Remote Authentication Bypass ================================================== Product: Everfocus EDSR series Version affected: 1.4 and older Website:...
Everfocus 1.4 - EDSR Remote Authentication Bypass
Everfocus 1.4 - EDSR Remote Authentication Bypass Product: Everfocus EDSR series Version affected: 1.4 and older Website: http://www.everfocus.com/ Discovered By: Andrea Fabrizi Email: andrea.fabrizi gmail com Web: http://www.andreafabrizi.it Vuln: remote DVR applet authentication bypass The EDSR...
Everfocus <= 1.4 EDSR Remote Authentication Bypass
No description provided by source. Product: Everfocus EDSR series Version affected: 1.4 and older Website: http://www.everfocus.com/ Discovered By: Andrea Fabrizi Email: andrea.fabrizi gmail com Web: http://www.andreafabrizi.it Vuln: remote DVR applet authentication bypass The EDSR firmware don't...