CVE-2006-6444

Stack-based buffer overflow in Nostra DivX Player 2.1, 2.2.00.0, and possibly earlier, allows remote attackers to execute arbitrary code via a long string in an M3U file. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-6444

Stack-based buffer overflow in Nostra DivX Player 2.1, 2.2.00.0, and possibly earlier, allows remote attackers to execute arbitrary code via a long string in an M3U file. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-6444

The CVE-2006-6444 issue affects Nostra DivX Player versions 2.1, 2.2.00.0 (and possibly earlier). It is caused by a stack-based buffer overflow triggered by a long string in an M3U file, which allows a remote attacker to execute arbitrary code. The vulnerability is exploitable remotely via crafte...

CVE-2006-6444: Undefined Security Weakness

Stack-based buffer overflow in Nostra DivX Player 2.1, 2.2.00.0, and possibly earlier, allows remote attackers to execute arbitrary code via a long string in an M3U file. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

Nostra DivX Player M3U超长播放列表缓冲区溢出漏洞

Nostra Divx Player提供了优质的DivX影片播放功能。 Nostra DivX Player在加载包含有超长字符串（大于33200字节）的M3U播放列表文件时存在栈溢出漏洞，可能允许攻击者远程执行任意指令。 Nostra Nostra DivX Player 2.2.00.0 Nostra Nostra DivX Player 2.1 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.nostradivx.com/...

Songbird Media Player <= 0.2 Format String Denial Of Service PoC

No description provided by source. / ======================================================================== 0-day Songbird Media Player = 0.2 Format String Denial Of Service PoC ======================================================================== Songbird Media Player and lower experiance a...

VUPlayer M3U/PLS播放列表解析缓冲区溢出漏洞

VUPlayer是Windows平台下的一款免费音频播放器，支持多种格式。 VUPlayer在处理畸形的M3U及PLS文件时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 VUPlayer在解析包含有超长文件名（大于1012字节）的M3U和PLS播放列表文件时存在栈溢出漏洞。如果用户受骗加载了恶意的播放列表文件的话就会触发这个漏洞，导致执行任意指令。 VUPlayer VUPlayer 2.44 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.vuplayer.com/vuplayer.php...

AtomixMP3 M3U文件路径缓冲区溢出漏洞

AtomixMP3是一款媒体播放程序。 AtomixMP3处理M3U文件路径存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 构建特殊的M3U文件，诱使用户打开，可导致以应用程序进程权限执行任意指令。 AtomixMP3 AtomixMP3 2.3 目前没有解决方案提供： http://www.atomixmp3.com/ EXTM3U EXTINF:0,TITLE C:\ + BUFFER x 520 bytes + JMP + SHELLCODE in ESP...

AtomixMP3 M3U/PLS播放列表解析缓冲区溢出漏洞

AtomixMP3是一个电脑用的混音软件，可以将两首歌曲混在一起。 AtomixMP3在处理畸形的M3U、PLS文件时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 AtomixMP3在解析包含有超长文件名（大于520字节）的M3U和PLS播放列表文件时存在栈溢出漏洞。如果用户受骗加载了恶意的播放列表文件的话就会触发这个漏洞，导致执行任意指令。 AtomixMP3 AtomixMP3 2.3 AtomixMP3 --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

CVE-2006-6251

Stack-based buffer overflow in VUPlayer 2.44 and earlier allows remote attackers to execute arbitrary code via a long string in an M3U file, aka an "M3U UNC Name" attack...

CVE-2006-6287

Stack-based buffer overflow in AtomixMP3 2.3 and earlier allows remote attackers to execute arbitrary code via a long pathname in an M3U file...

CVE-2006-6261

Buffer overflow in Quintessential Player 4.50.1.82 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted 1 M3u or 2 M3u-8 file; or a 3 crafted PLS file with a long value in the a NumberofEntries, b Length aka Length1, c Filename a...

CVE-2006-6251

Stack-based buffer overflow in VUPlayer 2.44 and earlier allows remote attackers to execute arbitrary code via a long string in an M3U file, aka an "M3U UNC Name" attack...

CVE-2006-6250

Format string vulnerability in Songbird Media Player 0.2 and earlier allows remote attackers to cause a denial of service crash via an M3U Playlist file containing extended ASCII, which causes the Unicode converter to be invoked...

CVE-2006-6250

Format string vulnerability in Songbird Media Player 0.2 and earlier allows remote attackers to cause a denial of service crash via an M3U Playlist file containing extended ASCII, which causes the Unicode converter to be invoked...

CVE-2006-6251

Stack-based buffer overflow in VUPlayer 2.44 and earlier allows remote attackers to execute arbitrary code via a long string in an M3U file, aka an "M3U UNC Name" attack...

CVE-2006-6261

Buffer overflow in Quintessential Player 4.50.1.82 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted 1 M3u or 2 M3u-8 file; or a 3 crafted PLS file with a long value in the a NumberofEntries, b Length aka Length1, c Filename a...

CVE-2006-6287

Stack-based buffer overflow in AtomixMP3 2.3 and earlier allows remote attackers to execute arbitrary code via a long pathname in an M3U file...

CVE-2006-6251

CVE-2006-6251 is a stack-based buffer overflow in VUPlayer (versions up to 2.49/2.44 and earlier) triggered by a crafted M3U playlist, allowing remote code execution when a user opens the file. Public exploit materials exist (Metasploit module, PoC scripts, and CERT/SEC advisories), indicating re...

CVE-2006-6287

CVE-2006-6287 describes a stack-based buffer overflow in AtomixMP3 2.3 and earlier exploitable via a long pathname in an M3U file. Connected records show related, distinct vectors for AtomixMP3: CVE-2007-2487 covers a stack-based overflow via a long filename in an MP3 file (different vector); CVE...