CVE-2014-9597

The CVE-2014-9597 entry refers to VideoLAN VLC media player 2.1.5, where the flaw is in the picture_pool_Delete function (misc/picture_pool.c). A crafted FLV file can lead to remote code execution or a denial of service (DEP violation and crash) on affected versions. The connected Nessus/OpenVAS ...

CVE-2014-9597

The picturepoolDelete function in misc/picturepool.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service DEP violation and application crash via a crafted FLV file...

KLA10451 Multiple vulnerabilities in VLC

Multiple serious vulnerabilities have been found in VLC. Malicious users can exploit these vulnerabilities to cause denial of service or execute arbitrary code. These vulnerabilities can be exploited remotely via a specially designed FLV or M2V files. Original advisories - Related products...

PT-2015-4301 · Videolan +1 · Vlc Media Player +1

Name of the Vulnerable Software and Affected Versions: VLC media player version 2.1.5 Description: The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in a DEP violation and application crash, via a crafted FLV file. This is due to a problem in the...

VLC Media Player '.flv' File Memory Corruption Vulnerability

VLC Media Player is a popular multimedia playback program. A memory corruption vulnerability exists in the VLC Media Player '.flv' file, which can be exploited by an attacker to cause a denial of service by executing arbitrary code execution or crashing the application...

Memory Corruption Bugs Found in VLC Media Player

There are two memory corruption vulnerabilities in some versions of the VLC open-source media player that can allow an attacker to run arbitrary code on vulnerable machines. Neither one of the vulnerabilities has been fixed by VideoLAN, the organization that maintains VLC. Security researcher...

Winamp 5.666 build 3516 - Corrupted .flv Crash (PoC)

Exploit Title : Winamp 5.666 build 3516 'f263.w5s' Corrupted flv Crash POC Product : Winamp 5.666 build 3516 Date : 12.12.2014 Exploit Author : ITDefensor Vulnerability Research Team http://itdefensor.ru/ Software Link : http://winampplugins.co.uk/Winamp/ Vulnerable version : Winamp 5.666 build...

Winamp 5.666 build 3516 - Corrupted .flv Crash (PoC)

Winamp 5.666 build 3516 - Corrupted .flv Crash PoC Exploit Title : Winamp 5.666 build 3516 'f263.w5s' Corrupted flv Crash POC Product : Winamp 5.666 build 3516 Date : 12.12.2014 Exploit Author : ITDefensor Vulnerability Research Team http://itdefensor.ru/ Software Link :...

Custom Websites Running HD FLV Player Plugin Vulnerable

Content management system providers Joomla and WordPress have patched a critical vulnerability in the HD FLV Player, but custom websites running the Flash video player are still vulnerable. Researchers at Sucuri disclosed this week that a separate security issue can be abused to send spam and has...

Joomla HD FLV 2.1.0.1 Arbitrary File Download

!/usr/bin/env python Exploit Title : Joomla HD FLV 2.1.0.1 and below Arbitrary File Download Vulnerability Exploit Author : Claudio Viviani Vendor Homepage : http://www.hdflvplayer.net/ Software Link : http://www.hdflvplayer.net/downloadcount.php?pid=5 Dork google 1: inurl:/component/hdflvplayer/...

Joomla HD FLV Player 2.1.0.1 - Arbitrary File Download Vulnerability

Joomla HD FLV version 2.1.0.1 suffers from an arbitrary file download vulnerability !/usr/bin/env python Exploit Title : Joomla HD FLV 2.1.0.1 and below Arbitrary File Download Vulnerability Exploit Author : Claudio Viviani Vendor Homepage : http://www.hdflvplayer.net/ Software Link :...

Joomla! Component com_hdflvplayer 2.1.0.1 - Arbitrary File Download

Joomla! Component comhdflvplayer 2.1.0.1 - Arbitrary File Download !/usr/bin/env python Exploit Title : Joomla HD FLV 2.1.0.1 and below Arbitrary File Download Vulnerability Exploit Author : Claudio Viviani Vendor Homepage : http://www.hdflvplayer.net/ Software Link :...

Joomla HD FLV 2.1.0.1 SQL Injection

!/usr/bin/python Exploit Title : Joomla HD FLV 2.1.0.1 and below SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://www.hdflvplayer.net/ Software Link : http://www.hdflvplayer.net/downloadcount.php?pid=5 Dork google 1: inurl:/component/hdflvplayer/ Dork google 2:...

Joomla! Component com_hdflvplayer < 2.1.0.1 - SQL Injection

!/usr/bin/python Exploit Title : Joomla HD FLV 2.1.0.1 and below SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://www.hdflvplayer.net/ Software Link : http://www.hdflvplayer.net/downloadcount.php?pid=5 Dork google 1: inurl:/component/hdflvplayer/ Dork google 2:...

Joomla! Component com_hdflvplayer 2.1.0.1 - SQL Injection

Joomla! Component comhdflvplayer 2.1.0.1 - SQL Injection !/usr/bin/python Exploit Title : Joomla HD FLV 2.1.0.1 and below SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://www.hdflvplayer.net/ Software Link : http://www.hdflvplayer.net/downloadcount.php?pid=5 Dork google 1:...

Joomla HD FLV 2.1.0.1 SQL Injection Vulnerability

Joomla HD FLV component version 2.1.0.1 suffers from a remote SQL injection vulnerability. !/usr/bin/python Exploit Title : Joomla HD FLV 2.1.0.1 and below SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://www.hdflvplayer.net/ Software Link :...

Winamp '.flv' File Processing Memory Corruption Vulnerability

Winamp is prone to a memory corruption vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nullsoft:winamp";...

smart-flv - jwplayer.swf XSS

The smart-flv WordPress plugin was affected by a jwplayer.swf XSS security vulnerability...

K-Lite Mega Codec Pack 3.5.7.0 - Local Windows Explorer DoS PoC

No description provided by source. K-Lite Mega Codec Pack based Local Windows Explorer DOS PoC. Version:3.5.7.0 vsfilter.dllVersion 1.0.1.4 that comes bundled with the above Codec Pack crashes when we try to use,select or even highlight the attached Test7.flv file in Windows Explorer,causing...

FLV Players 8 popup.php url Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/18954/info FLV Player is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code...