1918 matches found
security flaw
ImageMagick before 6.0 allows remote attackers to cause a denial of service application crash via a TIFF image with an invalid tag...
security flaw
The TIFF decoder in ImageMagick before 6.0 allows remote attackers to cause a denial of service crash via a crafted TIFF file...
[VulnWatch] RealOne Player / Real .WAV Heap Overflow File Format Vulnerability
Mark Litchfield of NGSSoftware has discovered a high risk Heap Overflow vulnerability in the .WAV file format when being opened by either of the following products: Windows: RealPlayer 10.5 6.0.12.1056 and below RealPlayer 10 RealOne Player V2 RealOne Player V1 RealPlayer 8 RealPlayer Enterprise...
security flaw
Integer overflow in 1 tifdirread.c and 2 tiffax3.c for libtiff 3.5.7 and 3.7.0 allows remote attackers to execute arbitrary code via a TIFF file containing a TIFFASCII or TIFFUNDEFINED directory entry with a -1 entry count, which leads to a heap-based buffer overflow...
O3Read 0.0.3 - HTML Parser Buffer Overflow
source: https://www.securityfocus.com/bid/12000/info o3read is prone to a buffer overflow vulnerability. This issue is exposed when the program parses HTML content during file format conversion. This issue is considered to be remote in nature since it is possible that files may originate from an...
Winamp 5.06 - IN_CDDA.dll Remote Buffer Overflow
Winamp 5.06 - INCDDA.dll Remote Buffer Overflow / Credits go to the author How to fix and study the bug: - The cdda library only reserves 20 bytes for names when files are ".cda" - run Winamp with ollye - when loaded locate and break at: 10009BBB 8D4C24 20 LEA ECX,DWORD PTR SS:ESP+20 10009BBF 84C...
Winamp <= 5.06 IN_CDDA.dll Remote Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ========================================================= Winamp //File ops. //m3u File format //http://hanna.pyxidis.org/tech/m3u.html // Host info: // Name=ntdll system // File version=5.1.2600.1217 xpsp2.030429-213 //...
Zinf Audio Player 2.2.1 (PLS File) Stack Buffer Overflow
This module exploits a stack-based buffer overflow in the Zinf Audio Player 2.2.1. An attacker must send the file to victim and the victim must open the file. Alternatively it may be possible to execute code remotely via an embedded PLS file within a browser, when the PLS extension is registered ...
SUSE-SA:2003:017: file
The remote host is missing the patch for the advisory SUSE-SA:2003:017 file. The file command can be used to determine the type of files. iDEFENSE published a security report about a buffer overflow in the handling-routines for the ELF file-format. In conjunction with other mechanisms like...
Arbitrary file overwriting in Unreal engine through UMOD
Luigi Auriemma Application: Unreal engine http://unreal.epicgames.com Versions: any game based on this engine that supports the UMOD installation. An example are Unreal Tournament = 451b and Unreal Tournament 2003 = 2225. A full list of vulnerable games is not available. Platforms: Windows and...
[VulnWatch] REAL One Player R3T File Format Stack Overflow
NGSSoftware Insight Security Research Advisory Name: REAL One Player R3T File Format Stack Overflow Systems Affected: RealPlayer 8, RealOne Player, RealOne Player v2 for Windows only all languages, RealPlayer 10 Beta English only and ReaPlayer Enterprise all versions, standalone and as configured...
CVE-2004-1244
Windows Media Player 9 allows remote attackers to execute arbitrary code via a PNG file containing large 1 width or 2 height values, aka the "PNG Processing Vulnerability."...
RealPlayer 7.08.0 - Media File Buffer Overflow
RealPlayer 7.08.0 - Media File Buffer Overflow // source: https://www.securityfocus.com/bid/3809/info RealPlayer is a software package distributed and maintained by Real Media. It is available for Microsoft Windows, Unix, and Linux. A problem with the handling of file format may make it possible ...
cfdecrypt.txt
Subject: Re: New Allaire Security Zone Bulletins and KB Articles To: [email protected] On Tue May 25 1999, James Stephens wrote: At 03:00 PM 5/24/99 -0700, [email protected] wrote: ASB99-08: Pages Encrypted with CFCRYPT.EXE Can Be Illegally Decrypted Has anyone seen the program that...
Malicious Windows Script Host Script File (.wsf)
This module creates a Windows Script Host WSH Windows Script File .wsf. Module Options msf use exploit/windows/fileformat/windows/scripthostwsf msf undefinedscripthostwsf show actions ...actions... msf undefinedscripthostwsf set ACTION msf undefinedscripthostwsf show options ...show and set...
CVE-2023-39430
This CVE ID has been rejected as unused by its CNA and does not represent an active vulnerability entry.
Security Update for Word 2003 (KB934181)
A security vulnerability exists in Microsoft Office Word 2003 that could allow remote code execution. This update resolves that vulnerability. This update also includes changes that enable blocking of specific file formats in Word 2003...