747 matches found
CVE-2014-4350
Buffer overflow in QT Media Foundation in Apple OS X before 10.9.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MIDI file...
Buffer overflow
Buffer overflow in QT Media Foundation in Apple OS X before 10.9.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MIDI file...
CVE-2014-4350
Buffer overflow in QT Media Foundation in Apple OS X before 10.9.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MIDI file...
CVE-2014-4350
CVE-2014-4350: Buffer overflow in QT Media Foundation on Apple OS X before 10.9.5 allows remote code execution or denial of service via a crafted MIDI file. Root cause: memory corruption from MIDI handling in QT Media Foundation. Affected: OS X versions prior to 10.9.5. Impact: arbitrary code exe...
[SECURITY] Fedora 20 Update: fluidsynth-1.1.6-4.fc20
FluidSynth is a real-time software synthesizer based on the SoundFont 2 specifications. It is a "software synthesizer". FluidSynth can read MIDI ev ents from the MIDI input device and render them to the audio device. It features real-time effect modulation using SoundFont 2.01 modulators, and a...
LG U8120 Mobile Phone MIDI File Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13154/info A remote denial of service vulnerability is reported to affect the LG U8120 Mobile Phone. The report indicates that the issue manifests when an affected phone processes a malicious MIDI file. The following...
Music Animation Machine MIDI Player SEH BOF
No description provided by source. Exploit Title: Music Animation Machine MIDI Player MAMX SEH BOF Date 1/4/2011 Author: Acidgen mailto:spama t hgrayhat.se Software Link: http://www.musanim.com/player/MAMPlayer2006aug19035.zip Version: 2006aug19 Release 035 Tested on: Windows XP SP2 SE Virtualbox...
Java MixerSequencer Object GM_Song Structure Handling Vulnerability
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
MS12-004 midiOutPlayNextPolyEvent Heap Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Winamp 5.6 - Arbitrary Code Execution in MIDI Parser
No description provided by source. http://www.kryptoslogic.com/advisories/2010/kryptoslogic-winamp-midi.txt PoC: https://www.exploit-db.com/sploits/15706.c ==-===-=====-=======-===========-=============-================= Winamp 5.6 Arbitrary Code Execution in MIDI Parser Kryptos Logic, December...
AKoff MIDI Player 1.00 - Buffer Overflow Exploit
No description provided by source. !/usr/bin/perl AKoff MIDI Player 1.00 Buffer Overflow Exploit By cr4wl3r cr4wl3r\x40linuxmail\x2Eorg gr33tz: str0ke, opt!x hacker, xoron, EA ngel, zvtral, Hmei7, mywisdom, cyberlog, irvian, and all my friend thanks: milw0rm, darkc0de, exploit-db, inj3ct0r,...
INMATRIX Zoom Player Pro <= 6.0.0 (.MID) Integer Overflow PoC
No description provided by source. !/usr/bin/env python INMATRIX Zoom Player Pro = 6.0.0 .MID Integer Overflow PoC Found By: DrIDE Credits: Platen Tested: verified on v 5.0.2 and 6.0.0 on XP SP3 Download: http://www.inmatrix.com MIDI Structure must be accurate buff =...
NullSoft Winamp 2.81/2.91/3.0/3.1 MIDI Plugin IN_MIDI.DLL Track Data Size Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8567/info Winamp MIDI plugin, INMIDI.DLL has been reported prone to a buffer overflow issue when handling malicious MIDI files. The issue presents itself when a malicious value is passed as the Track Data Size of a...
Music Animation Machine MIDI Player Local Crash PoC
No description provided by source. Exploit Title: Music Animation Machine MIDI Player Local Crash PoC Date: 1/3/2011 Author: c0d3R'Z Software Link: http://www.musanim.com/player/MAMPlayer2006aug19035.zip Version: Release 035 Tested on: Windows XP SP2 EN VirtualBox The application crashes when try...
Winamp <= 5.21 (Midi File Header Handling) Buffer Overflow PoC
/ Winamp 5.21 - Midi Buffer Overflow inmidi.dll PoC coded by: BassReFLeX Date: 19 Jun 2006 / include stdio.h include stdlib.h include string.h void usagechar file; char header = \x4D\x54\x68\x64\x00\x00 \x00\x06\x00\x00\x00\x01 \x00\x60\x4D\x54\x72\x6B \x00\x00; char badc0de =...
UBUNTU-CVE-2013-4234
Multiple heap-based buffer overflows in the 1 abcMIDIdrum and 2 abcMIDIgchord functions in loadabc.cpp in libmodplug 0.8.8.4 and earlier allow remote attackers to cause a denial of service memory corruption and crash and possibly execute arbitrary code via a crafted ABC...
CVE-2013-4234
Multiple heap-based buffer overflows in the 1 abcMIDIdrum and 2 abcMIDIgchord functions in loadabc.cpp in libmodplug 0.8.8.4 and earlier allow remote attackers to cause a denial of service memory corruption and crash and possibly execute arbitrary code via a crafted ABC...
VLC Media Player ABC File Instruction Field Parsing Heap Overflow
A remote code execution vulnerability has been reported in the libmodplug library used by VLC Media Player. The vulnerability is due to an error while parsing Instruction fields in ABC files with the style sheet directive "MIDI drum" or "MIDI gchord". Remote attackers could exploit this...
SuSE 11.3 Security Update : java-1_7_0-openjdk (SAT Patch Number 8090)
This update to icedtea-2.4.1 fixes various security issues : - S6741606, CVE-2013-2407: Integrate Apache Santuario - S7158805, CVE-2013-2445: Better rewriting of nested subroutine calls - S7170730, CVE-2013-2451: Improve Windows network stack support. - S8000638, CVE-2013-2450: Improve...
Ubuntu: Security Advisory (USN-1394-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...