CVE-2012-6618

The avprobeinputbuffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running with certain -probesize values, allows remote attackers to cause a denial of service crash via a crafted MP3 file, possibly related to frame size or lack of sufficient "frames to estimate rate."...

Design/Logic Flaw

The avprobeinputbuffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running with certain -probesize values, allows remote attackers to cause a denial of service crash via a crafted MP3 file, possibly related to frame size or lack of sufficient "frames to estimate rate."...

CVE-2012-6618

The avprobeinputbuffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running with certain -probesize values, allows remote attackers to cause a denial of service crash via a crafted MP3 file, possibly related to frame size or lack of sufficient "frames to estimate rate."...

UBUNTU-CVE-2012-6618

The avprobeinputbuffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running with certain -probesize values, allows remote attackers to cause a denial of service crash via a crafted MP3 file, possibly related to frame size or lack of sufficient "frames to estimate rate."...

CVE-2012-6618

The connected documents confirm a concrete vulnerability: in FFmpeg, the av_probe_input_buffer function in libavformat/utils.c (FFmpeg before 1.0.2)is exploitable via a crafted MP3 file when using certain -probesize values, causing a remote denial of service (crash). This is the underlying root c...

CVE-2012-6618

The avprobeinputbuffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running with certain -probesize values, allows remote attackers to cause a denial of service crash via a crafted MP3 file, possibly related to frame size or lack of sufficient "frames to estimate rate."...

CVE-2012-6618

The avprobeinputbuffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running with certain -probesize values, allows remote attackers to cause a denial of service crash via a crafted MP3 file, possibly related to frame size or lack of sufficient "frames to estimate rate."...

Audacious Player 3.4.23.4.1 - .mp3 Crash (PoC)

Audacious Player 3.4.23.4.1 - .mp3 Crash PoC Exploit Title: Audacious Player 3.4.2/3.4.1 Windows .mp3 - Crash POC Date: 26.11.2013 Exploit Author: Akin Tosunlar Software Link3.4.2: http://distfiles.audacious-media-player.org/audacious-3.4.2-win32.zip Software Link3.4.1:...

Boilsoft RM TO MP3 Converter 1.72 - Crash POC (.wav) Vulnerability

Exploit for windows platform in category dos / poc First chance exceptions are reported before any exception handling. This exception may be expected and handled. eax=ffffffff ebx=003b96d8 ecx=00000000 edx=00000000 esi=ffffffff edi=001b99ba eip=7498e82c esp=0012db78 ebp=0012dc0c iopl=0 nv up ei p...

discuz! x3.0 /static/image/common/mp3player.swf 跨站脚本漏洞

No description provided by source...

mp3-player 2.5 Cross Site Scripting / Content Spoofing

Hello list! These are Cross-Site Scripting and Content Spoofing vulnerabilities in mp3-player. ------------------------- Affected products: ------------------------- Vulnerable are mp3-player 2.5 and previous versions. ------------------------- Affected vendors: ------------------------- U-Studio...

Multiple vulnerabilities in mp3-player

Hello 3APA3A! These are Cross-Site Scripting and Content Spoofing vulnerabilities in mp3-player. ------------------------- Affected products: ------------------------- Vulnerable are mp3-player 2.5 and previous versions. ------------------------- Affected vendors: ------------------------- U-Stud...

A-PDF WAV to MP3 1.0.0 Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'A-PDF WAV to MP3 v1.0.0 Buffer...

A-PDF WAV to MP3 1.0.0 Buffer Overflow Vulnerability

This Metasploit module exploits a buffer overflow in A-PDF WAV to MP3 version 1.0.0. When the application is used to import a specially crafted m3u file, a buffer overflow occurs allowing arbitrary code execution. This file is part of the Metasploit Framework and may be subject to redistribution...

Symantec PGP Desktop and Encryption Desktop Local Privilege Escalation Vulnerability

Symantec PGP/Encryption Desktop is prone to a local privilege escalation vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

Cross site scripting

Cross-site scripting XSS vulnerability in the MP3 Player module for Drupal 6.x allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the file name of a MP3 file...

CVE-2013-1971

Cross-site scripting XSS vulnerability in the MP3 Player module for Drupal 6.x allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the file name of a MP3 file...

CVE-2013-1971

The CVE-2013-1971 vulnerability concerns the Drupal 6.x MP3 Player contributed module. The issue is a cross-site scripting (XSS) flaw where remote authenticated users with certain permissions can inject arbitrary script/HTML via the MP3 filename, caused by insufficient filtering of user-supplied ...

Design/Logic Flaw

The mget function in libmagic/softmagic.c in the Fileinfo component in PHP 5.4.x before 5.4.16 allows remote attackers to cause a denial of service invalid pointer dereference and application crash via an MP3 file that triggers incorrect MIME type detection during access to an finfo object...

CVE-2013-4636

The mget function in libmagic/softmagic.c in the Fileinfo component in PHP 5.4.x before 5.4.16 allows remote attackers to cause a denial of service invalid pointer dereference and application crash via an MP3 file that triggers incorrect MIME type detection during access to an finfo object...