iTunes m3u Playlist Overflow

Added: 07/03/2012 CVE: CVE-2012-0677 BID: 53933 OSVDB: 82897 Background iTunes is a free media player for multiple platforms. Problem iTunes does not properly validate parameters for EXTINF: directives in m3u files. This results in an exploitable stack overflow. Resolution Upgrade to iTunes 10.6....

iTunes m3u Playlist Overflow

Added: 07/03/2012 CVE: CVE-2012-0677 BID: 53933 OSVDB: 82897 Background iTunes is a free media player for multiple platforms. Problem iTunes does not properly validate parameters for EXTINF: directives in m3u files. This results in an exploitable stack overflow. Resolution Upgrade to iTunes 10.6....

Winamp 5.13 - '.m3u' File Exception Handling Remote Denial of Service

source: https://www.securityfocus.com/bid/54190/info Winamp is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause an affected application to crash, denying service to legitimate users which may aid in other attacks. Winamp 5.13 is vulnerable; others may...

Apple iTunes 10 - Extended M3U Stack Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Apple iTunes 10...

Apple iTunes 10 Extended M3U Stack Buffer Overflow

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Apple iTunes 10 Extended M3U Stack Buffer Overflow

This module exploits a stack buffer overflow in iTunes 10.4.0.80 to 10.6.1.7. When opening an extended .m3u file containing an "EXTINF:" tag description, iTunes will copy the content after "EXTINF:" without appropriate checking from a heap buffer to a stack buffer, writing beyond the stack buffer...

iTunes Extended M3U Stack Buffer Overflow

============================================================================================ Apple iTunes 'iTunes Extended M3U Stack Buffer Overflow', 'Description' = %q This module exploits a stack buffer overflow in iTunes 10.4.0.80 to 10.6.1.7. When opening an extended .m3u file containing an...

Total Video Player 1.31 .m3u Crash PoC

Exploit for windows platform in category dos / poc Exploit Title: Total Video Player 1.31 .m3u Crash Poc Date: June 17 2012 Exploit Author: 0dem Vendor Homepage: http://www.effectmatrix.com/ Software Link: http://download.cnet.com/Total-Video-Player/3000-21394-10552696.html Version: V1.31 Tested...

Total Video Player 1.31 - '.m3u' Crash (PoC)

Exploit Title: Total Video Player 1.31 .m3u Crash Poc Date: June 17 2012 Exploit Author: 0dem Vendor Homepage: http://www.effectmatrix.com/ Software Link: http://download.cnet.com/Total-Video-Player/3000-21394-10552696.html Version: V1.31 Tested on: Windows XP SP 3 Description: Total Video Player...

Karafun Player 1.20.86 .m3u Crash PoC

Exploit for windows platform in category dos / poc Exploit Title: Karafun Player V1.20.86 .m3u file Denial of Service Date: 2012.6.15 Vulnerability Discovered & Exploit by Styxosaurus Styxosaurus at gmail dot com Software Link: http://www.karafun.com/karaokeplayer/ Version: V1.20.86 Description:...

Karafun Player 1.20.86 - '.m3u' Crash (PoC)

Exploit Title: Karafun Player V1.20.86 .m3u file Denial of Service Date: 2012.6.15 Vulnerability Discovered & Exploit by Styxosaurus Styxosaurus at gmail dot com Software Link: http://www.karafun.com/karaokeplayer/ Version: V1.20.86 Description: Karafun will crash and not responding when trying t...

Karafun Player 1.20.86 - .m3u Crash (PoC)

Karafun Player 1.20.86 - .m3u Crash PoC Exploit Title: Karafun Player V1.20.86 .m3u file Denial of Service Date: 2012.6.15 Vulnerability Discovered & Exploit by Styxosaurus Styxosaurus at gmail dot com Software Link: http://www.karafun.com/karaokeplayer/ Version: V1.20.86 Description: Karafun wil...

TFM MMPlayer (m3u/ppl File) Buffer Overflow

Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

TFM MMPlayer - '.m3u' / '.ppl' Local Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'TFM MMPlayer...

Apple iTunes < 10.6.3 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes on the remote Windows host is prior to version 10.6.3. It is, therefore, affected by the following vulnerabilities : - A memory corruption vulnerability exists in the WebKit component. By using a specially crafted website, an attacker can exploit this to cause a denial...

Apple iTunes < 10.6.3 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 10.6.3 and is, therefore, affected by the following issues : - A memory corruption issue exists in WebKit that can allow malicious websites to crash the application and possibly to execute arbitrary code. CVE-2012-0672...

Apple iTunes执行任意代码和拒绝服务漏洞

CVE ID: CVE-2012-0672,CVE-2012-0677 iTunes是一款媒体播放器的应用程序，2001年1月10日由苹果电脑在旧金山的Macworld Expo推出，用来播放以及管理数字音乐和与视频文件，是管理苹果iPod的文件的主要工具。 Apple iTunes在捆绑的WebKit中存在有漏洞版本，并且在处理特制的M3U ".m3u"文件列表时存在错误可被利用造成堆缓冲区溢出，执行任意代码，从而控制用户系统。该漏洞不影响OS X Lion系统上的应用。 0 Apple iTunes 10.x 厂商补丁： Apple -----...

Apple iTunes 10.6.1.7 - .m3u Walking Heap Buffer Overflow (PoC)

Apple iTunes 10.6.1.7 - .m3u Walking Heap Buffer Overflow PoC !/usr/bin/perl Apple iTunes 10.6.1.7 M3U Playlist File Walking Heap Buffer Overflow Vendor: Apple Inc. Product web page: http://www.apple.com Affected version: 10.6.1.7 and 10.6.0.40 Summary: iTunes is a free application for your Mac o...

Apple iTunes 10.6.1.7 M3U Playlist File Walking Heap Buffer Overflow

Exploit for multiple platform in category dos / poc !/usr/bin/perl Apple iTunes 10.6.1.7 M3U Playlist File Walking Heap Buffer Overflow Vendor: Apple Inc. Product web page: http://www.apple.com Affected version: 10.6.1.7 and 10.6.0.40 Summary: iTunes is a free application for your Mac or PC. It...

Apple iTunes 10.6.1.7 - '.m3u' Walking Heap Buffer Overflow (PoC)

!/usr/bin/perl Apple iTunes 10.6.1.7 M3U Playlist File Walking Heap Buffer Overflow Vendor: Apple Inc. Product web page: http://www.apple.com Affected version: 10.6.1.7 and 10.6.0.40 Summary: iTunes is a free application for your Mac or PC. It lets you organize and play digital music and video on...