VUPEN Security Research - Winamp Player FLV Data Processing Multiple Overflow Vulnerabilities

VUPEN Security Research - Winamp Player FLV Data Processing Multiple Overflow Vulnerabilities http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Winamp is a proprietary media player for Windows-based PCs, written by Nullsoft, now a subsidiary of AOL. It is...

Sql injection

SQL injection vulnerability in the HD FLV Player comhdflvplayer component 1.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CVE-2010-1372

SQL injection vulnerability in the HD FLV Player comhdflvplayer component 1.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CVE-2010-1372

The CVE-2010-1372 issue affects the Joomla! extension HD FLV Player (com_hdflvplayer) version 1.3. The vulnerability is an SQL injection in the index.php id parameter, enabling remote attackers to manipulate the database. CVSS2 base score 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P). No explicit exploit deta...

CVE-2010-1372

SQL injection vulnerability in the HD FLV Player comhdflvplayer component 1.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

Joomla! Component HD FLV Player - 'id' SQL Injection

source: https://www.securityfocus.com/bid/38401/info The HD FLV Player component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Joomla! Component HD FLV Player - id SQL Injection

Joomla! Component HD FLV Player - id SQL Injection source: https://www.securityfocus.com/bid/38401/info The HD FLV Player component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...

Adobe Flash Player FLV Processing Buffer Overflow (CVE-2007-3456)

Adobe Flash Player is a multimedia and application player. Flash Player runs the Sockware Flash SWF files, which contains multimedia content including vector and raster graphics, video, audio, and scripts. Flash Player is made available as a plug-in for a wide range of web browser applications...

To crack youku video password-vulnerability warning-the black bar safety net

Youku video password cracking: Open the FLV parsing the website recommended here to use the site: http://www.flvcd.com from the browser address bar to copy the need to decrypt the youku video address, paste the video address to the FLV parsing the address of website box, click”Start GO for...

Mandriva Update for xine-lib MDVSA-2008:178 (xine-lib)

Check for the Version of xine-lib OpenVAS Vulnerability Test Mandriva Update for xine-lib MDVSA-2008:178 xine-lib Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Ubuntu Update for xine-lib vulnerabilities USN-635-1

Ubuntu Update for Linux kernel vulnerabilities USN-635-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6351.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for xine-lib vulnerabilities USN-635-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

CVE-2008-5072

vsfilter.dll in K-Lite Mega Codec Pack 3.5.7.0 allows remote attackers to cause a denial of service application crash via a malformed FLV file...

Design/Logic Flaw

vsfilter.dll in K-Lite Mega Codec Pack 3.5.7.0 allows remote attackers to cause a denial of service application crash via a malformed FLV file...

CVE-2008-5072

CVE-2008-5072 affects the K-Lite Mega Codec Pack (vsfilter.dll, 3.5.7.0). A malformed FLV file can cause the host application to crash, yielding a Denial of Service. Documents consistently describe a DoS impact via crafted input to vsfilter.dll; no verified exploit details or mitigations are prov...

CVE-2008-5072

vsfilter.dll in K-Lite Mega Codec Pack 3.5.7.0 allows remote attackers to cause a denial of service application crash via a malformed FLV file...

K-Lite Mega Codec Pack 3.5.7.0 Local Windows Explorer DoS PoC

No description provided by source. K-Lite Mega Codec Pack based Local Windows Explorer DOS PoC. Version:3.5.7.0 "vsfilter.dll"Version 1.0.1.4 that comes bundled with the above Codec Pack crashes when we try to use,select or even highlight the attached "Test7.flv" file in Windows Explorer,causing...

K-Lite Mega Codec Pack 3.5.7.0 - Local Windows Explorer Denial of Service (PoC)

K-Lite Mega Codec Pack 3.5.7.0 - Local Windows Explorer Denial of Service PoC K-Lite Mega Codec Pack based Local Windows Explorer DOS PoC. Version:3.5.7.0 "vsfilter.dll"Version 1.0.1.4 that comes bundled with the above Codec Pack crashes when we try to use,select or even highlight the attached...

K-Lite Mega Codec Pack 3.5.7.0 - Local Windows Explorer Denial of Service (PoC)

K-Lite Mega Codec Pack based Local Windows Explorer DOS PoC. Version:3.5.7.0 "vsfilter.dll"Version 1.0.1.4 that comes bundled with the above Codec Pack crashes when we try to use,select or even highlight the attached "Test7.flv" file in Windows Explorer,causing Explorer to Crash. Greetz fly out t...

Debian DSA-1586-1 : xine-lib - multiple vulnerabilities

Multiple vulnerabilities have been discovered in xine-lib, a library which supplies most of the application functionality of the xine multimedia player. The Common Vulnerabilities and Exposures project identifies the following three problems : - CVE-2008-1482 Integer overflow vulnerabilities exis...

CVE-2008-1482

Multiple integer overflows in xine-lib 1.1.11 and earlier allow remote attackers to trigger heap-based buffer overflows and possibly execute arbitrary code via 1 a crafted .FLV file, which triggers an overflow in demuxers/demuxflv.c; 2 a crafted .MOV file, which triggers an overflow in...