Winamp "in_midi"组件MIDI时间戳栈缓冲区溢出漏洞

BUGTRAQ ID: 45221 Winamp是一款流行的媒体播放器，支持多种文件格式。 Winamp在实现上存在漏洞，攻击者可利用此漏洞以用户权限在受影响的应用程序中执行任意代码，造成拒绝服务。 此漏洞源于未能对用户提供的数据执行足够的边界检查。Winamp的栈分配是可预测的。攻击者可选择写入到已保存的基本指针的值，因此当恢复了基础指针后，调用函数的栈报文将被移动到攻击者控制的返回地址。 Nullsoft Winamp 5.01 - 5.5.8 厂商补丁： Nullsoft -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Winamp 5.6 - MIDI Parser Arbitrary Code Execution

Winamp 5.6 - MIDI Parser Arbitrary Code Execution http://www.kryptoslogic.com/advisories/2010/kryptoslogic-winamp-midi.txt PoC: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/15706.c ==-===-=====-=======-===========-=============-================= Winamp 5.6...

Winamp 5.6 - 'MIDI Parser' Arbitrary Code Execution

http://www.kryptoslogic.com/advisories/2010/kryptoslogic-winamp-midi.txt PoC: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/15706.c ==-===-=====-=======-===========-=============-================= Winamp 5.6 Arbitrary Code Execution in MIDI Parser Kryptos Logic,...

Winamp < 5.601 MIDI Timestamp Stack Buffer Overflow

Binary data 5726.prm...

Winamp 5.6 Arbitrary Code Execution In MIDI Parser

http://www.kryptoslogic.com/advisories/2010/kryptoslogic-winamp-midi.txt ==-===-=====-=======-===========-=============-================= Winamp 5.6 Arbitrary Code Execution in MIDI Parser Kryptos Logic, December 2010 ==-===-=====-=======-===========-=============-================= ===== Timeline...

CVE-2010-4370

Multiple integer overflows in the inmidi plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted MIDI file that triggers a buffer overflow...

Integer overflow

Multiple integer overflows in the inmidi plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted MIDI file that triggers a buffer overflow...

CVE-2010-4370

Multiple integer overflows in the inmidi plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted MIDI file that triggers a buffer overflow...

CVE-2010-4370

CVE-2010-4370 affects Winamp through the in_midi plugin, where an integer wrapping/overflow in MIDI parsing can trigger a heap/buffer overflow, enabling remote code execution via a crafted MIDI file. Exploitation context: remote attacker; affected version range: Winamp before 5.6. Mitigation: upg...

Fedora Update for tuxguitar FEDORA-2010-15650

Check for the Version of tuxguitar OpenVAS Vulnerability Test Fedora Update for tuxguitar FEDORA-2010-15650 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Sweet Midi Player V 2.4.7 DLL Hijacking Exploit

Exploit for windows platform in category local exploits =============================================== Sweet Midi Player V 2.4.7 DLL Hijacking Exploit =============================================== || || | || o,7 || . o7 || 4||| ow, : / /...

Winamp < 5.59 Build 3033 Multiple Vulnerabilities

Binary data 5689.prm...

Sweet Sixteen MIDI DLL Hijacking Exploit

Exploit for windows platform in category local exploits ======================================== Sweet Sixteen MIDI DLL Hijacking Exploit ======================================== || || | || o,7 || . o7 || 4||| ow, : / / . 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 ...

Fedora Update for tuxguitar FEDORA-2010-15783

Check for the Version of tuxguitar OpenVAS Vulnerability Test Fedora Update for tuxguitar FEDORA-2010-15783 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

[SECURITY] Fedora 13 Update: tuxguitar-1.2-3.fc13

TuxGuitar is a guitar tablature editor with player support through midi. It can display scores and multitrack tabs. Various features TuxGuitar provides inc lude autoscrolling while playing, note duration management, bend/slide/vibrato/ hammer-on/pull-off effects, support for tuplets, time signatu...

[SECURITY] Fedora 12 Update: tuxguitar-1.2-3.fc12

TuxGuitar is a guitar tablature editor with player support through midi. It can display scores and multitrack tabs. Various features TuxGuitar provides inc lude autoscrolling while playing, note duration management, bend/slide/vibrato/ hammer-on/pull-off effects, support for tuplets, time signatu...

Sweet Midi Player V 2.4.7 DLL Hijacking Exploit

Exploit for windows platform in category local exploits =============================================== Sweet Midi Player V 2.4.7 DLL Hijacking Exploit =============================================== || || | || o,7 || . o7 || 4||| ow, : / /...

[SECURITY] Fedora 14 Update: tuxguitar-1.2-3.fc14

TuxGuitar is a guitar tablature editor with player support through midi. It can display scores and multitrack tabs. Various features TuxGuitar provides inc lude autoscrolling while playing, note duration management, bend/slide/vibrato/ hammer-on/pull-off effects, support for tuplets, time signatu...

[SECURITY] Fedora 13 Update: ardour-2.8.11-5.fc13

Ardour is a multichannel hard disk recorder HDR and digital audio worksta tion DAW. It is capable of simultaneous recording 24 or more channels of 32 bit audio at 48kHz. Ardour is intended to function as a "professional" HDR syst em, replacing dedicated hardware solutions such as the Mackie HDR,...

[SECURITY] Fedora 12 Update: ardour-2.8.11-5.fc12

Ardour is a multichannel hard disk recorder HDR and digital audio worksta tion DAW. It is capable of simultaneous recording 24 or more channels of 32 bit audio at 48kHz. Ardour is intended to function as a "professional" HDR syst em, replacing dedicated hardware solutions such as the Mackie HDR,...