8228 matches found
Winamp MP3和AIFF文件解析堆溢出漏洞
BUGTRAQ ID: 33226 Winamp是一款流行的媒体播放器，支持多种文件格式。 Winamp在解析畸形MP3和AIFF文件头时存在堆溢出漏洞，用户受骗打开了恶意媒体文件就可能导致执行任意代码。 Nullsoft Winamp 5.541 厂商补丁： Nullsoft -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.winamp.com/ Winamp = 5.541 multiples Denial of Services MP3/AIFF Winamp MP3 file parsing...
Winamp 5.541 - '.mp3'/'.aiff' File Multiple Denial of Service Vulnerabilities
Winamp !/usr/bin/perl use strict; my $mp3 = "\x49\x44\x33\x00\x00\x00\x00\x00\x09\x07\x54\x49\x54\x32\x00\x00\x00\x08\x00\x00\x00". "\x50\x69\x73\x74\x65\x20\x35\x54\x50\x45\x31\x00\x00\x00\x05\x00\x00\x00\x41\x6e". "\x69\x73\x54\x41\x4c\x42\x00\x00\x00\x0d\x00\x00\x00\x62\x6c\x61\x62\x6c\x61\x20...
Coolplayer buffer overflow
Buffer overflow on skin file parsing...
Microsoft Windows Media Player 9/10/11 - '.WAV' File Parsing Code Execution
// source: https://www.securityfocus.com/bid/33042/info Microsoft Windows Media Player is prone to a code-execution vulnerability. An attacker can exploit this issue by tricking an unsuspecting victim into opening a malicious file with the vulnerable application. A successful exploit will allow...
Capilano DesignWorks buffer overflow
Buffer overflow on .CCT file parsing...
Adobe Pagemaker buffer overflow
Buffer overflow on .PMD files parsing...
TugZip 3.5 Zip File Parsing Buffer Overflow Vulnerability
This module exploits a stack-based buffer overflow vulnerability in the latest version 3.5 of TugZip archiving utility. In order to trigger the vulnerability, an attacker must convince someone to load a specially crafted zip file with TugZip by double click or file open. By doing so, an attacker...
Microsoft GDI+ GIF文件远程代码执行漏洞（MS08-052）
BUGTRAQ ID: 31020 CVE ID：CVE-2008-3013 CNCVE ID：CNCVE-20083013 Microsoft Windows是一款微软开发的操作系统。 Microsoft Windows GDI+子系统解析特殊构建的GIF文件存在问题，远程攻击者可以利用漏洞进行内存破坏，可导致以登录用户进程权限执行任意代码。 提供畸形的图形扩展扩展可触发可利用的内存破坏条件，构建特殊的GIF文件，诱使用户访问，可触发此漏洞。 Microsoft Works 8.0 Microsoft Windows XP Professional x64 Edition SP2...
Microsoft Windows GDI+ BMP File Parsing Integer Overflow (MS08-052; CVE-2004-0904; CVE-2008-3015)
Bitmap BMP is an image file format used to store bitmap digital images. A remote code execution vulnerability has been discovered in the way GDI+ handles integer calculations for BMP files. The vulnerability is due to a buffer overflow when GDI+ fails to properly processes a malformed header in a...
Microsoft GDI+ GIF File Parsing Remote Code Execution Vulnerability
Description Microsoft GDI+ is prone to a remote code-execution vulnerability because the vector graphics link library improperly parses GIF image files. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts may...
mplayer -- DMO File Parsing Buffer Overflow Vulnerability
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
VLC 0.8.6i tta File Parsing Heap Overflow PoC
No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - Orange Bat advisory - Name : VLC 0.8.6i Class : Heap overflow Published : 2008-08-16 Credit : g g orange-bat com - - Details - \modules\demux\tta.c define TTAFRAMETIME 1.04489795918367346939 . . . int...
VLC 0.8.6i tta File Parsing Heap Overflow PoC
Exploit for multiple platform in category dos / poc ============================================= VLC 0.8.6i tta File Parsing Heap Overflow PoC ============================================= -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - Orange Bat advisory - Name : VLC 0.8.6i Class : Heap...
Apple Core Image Fun House buffer overflow
Buffer overflow on .funhouse files parsing...
Microsoft DirectX SAMI File Parsing Stack Based Buffer Overflow Vulnerability
Description Microsoft DirectX is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. The vulnerability occurs when handling malformed SAMI files. Successfully exploiting this issue allows remote attackers to execute...
Apple iCAL multiple security vulnerabilities
Multiple vulnerabilities on .ics files parsing...
Microsoft antiviral applications multiple security vulnerabilities
Multiple DoS conditions on different file formats parsing...
DEBIAN-CVE-2008-1833
Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary...