CVE-2009-3153

CVE-2009-3153 describes multiple cross-site scripting (XSS) vulnerabilities in the x10 MP3 Search engine 1.6.5. The issues allow remote attackers to inject arbitrary scripts/HTML via: 1) pic_id (includes/video_ad.php), 2) category (linkvideos_listing.php), 3) id (templates/header1.php), 4) id (mp...

Microsoft Windows Media Format Remote Code Execution Vulnerability (973812)

This host is missing a critical security update according to Microsoft Bulletin MS09-047. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Millenium MP3 Studio - .pls .mpf .m3u Universal Local Buffer Overflow (SEH)

Millenium MP3 Studio - .pls .mpf .m3u Universal Local Buffer Overflow SEH !/usr/bin/perl by hack4love [email protected] Millenium MP3 Studio pls/mpf/m3u Local Universal BOF ExploitS SEH POC WAS BY::HACK4LOVE http://www.milw0rm.com/exploits/9277 thankscorelanc0d3r 3 EXPLOITS WORK SOOOOOOOOOOOO...

Millenium MP3 Studio - '.pls' / '.mpf' / '.m3u' Universal Local Buffer Overflow (SEH)

!/usr/bin/perl by hack4love [email protected] Millenium MP3 Studio pls/mpf/m3u Local Universal BOF ExploitS SEH POC WAS BY::HACK4LOVE http://www.milw0rm.com/exploits/9277 thankscorelanc0d3r 3 EXPLOITS WORK SOOOOOOOOOOOOO GOOOOOOOOOD...

Microsoft Windows Media formats security vulnerabilities

Uninitialized pointer free on ASF files parsing, memory corruption on MP3 files parsing...

Memory corruption

Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows Vista Gold, SP1, and SP2 and Server 2008; allows remote attackers to execute arbitrary code via an MP3 file with crafted metadata that triggers memory corruption, aka "Windows Media Playback Memory...

CVE-2009-2499

Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows Vista Gold, SP1, and SP2 and Server 2008; allows remote attackers to execute arbitrary code via an MP3 file with crafted metadata that triggers memory corruption, aka "Windows Media Playback Memory...

CVE-2009-2499

Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows Vista Gold, SP1, and SP2 and Server 2008; allows remote attackers to execute arbitrary code via an MP3 file with crafted metadata that triggers memory corruption, aka "Windows Media Playback Memory...

Unfixed XSS vulnerability at mp3.soundquake.com

Security researcher tenest, has submitted on 09/08/2009 a cross-site-scripting XSS vulnerability affecting mp3.soundquake.com, which at the time of submission ranked 2308393 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is...

Microsoft Windows Media Format MP3 Metadata Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability that arises when an affected Windows component handles a malicious MP3 file. Successful exploits may allow attackers to execute arbitrary code with the privileges of the currently logged-in user. Failed attacks will...

MS09-047: Vulnerabilities in Windows Media Format Could Allow Remote Code Execution (973812)

The remote Windows host contains a version of the Windows Media Format Runtime or Windows Media Services that is affected by multiple vulnerabilities : - The ASF parser has an invalid free vulnerability. A remote attacker could exploit this by tricking a user into opening a specially crafted ASF...

Microsoft Windows MP3 File Media Playback Memory Corruption (MS09-047; CVE-2009-2499)

MPEG-1 Audio Layer 3 MP3 is a file format which uses lossy compression to compress audio information. A remote code execution vulnerability has been reported in the way Microsoft Windows handles specially crafted MP3 media files. The vulnerability is due the Windows component responsible for...

Soritong MP3 Player 1.0 (.m3u//UI.txt) Universal Local BOF Exploits

No description provided by source. !/usr/bin/perl by hack4love [email protected] Soritong MP3 Player 1.0 .m3u//UI.txt Universal Local BOF SEH Original exploit:::http://www.milw0rm.com/exploits/8624 by Stack m3u file my $bof="\x41" x 260; my $nsh="\xEB\x06\x90\x90"; my...

Soritong MP3 Player 1.0 (.m3u//UI.txt) Universal Local BOF Exploits

Exploit for unknown platform in category local exploits =================================================================== Soritong MP3 Player 1.0 .m3u//UI.txt Universal Local BOF Exploits =================================================================== !/usr/bin/perl by hack4love Soritong MP...

Soritong MP3 Player 1.0 - '.m3u' / UI.txt Universal Local Buffer Overflow

!/usr/bin/perl by hack4love [email protected] Soritong MP3 Player 1.0 .m3u//UI.txt Universal Local BOF SEH Original exploit:::http://www.milw0rm.com/exploits/8624 by Stack m3u file my $bof="\x41" x 260; my $nsh="\xEB\x06\x90\x90"; my $seh="\x47\x30\x01\x10";Player.dll my $nop="\x90" x 2000; m...

Soritong MP3 Player 1.0 - .m3u UI.txt Universal Local Buffer Overflow

Soritong MP3 Player 1.0 - .m3u UI.txt Universal Local Buffer Overflow !/usr/bin/perl by hack4love [email protected] Soritong MP3 Player 1.0 .m3u//UI.txt Universal Local BOF SEH Original exploit:::http://www.milw0rm.com/exploits/8624 by Stack m3u file my $bof="\x41" x 260; my...

x10 MP3 Automatic Search Engine 1.6.5b - embed.php?name Cross-Site Scripting

x10 MP3 Automatic Search Engine 1.6.5b - embed.php?name Cross-Site Scripting source: https://www.securityfocus.com/bid/43336/info x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker...

x10 MP3 Automatic Search Engine 1.6.5b - video_listing.php?key Cross-Site Scripting

x10 MP3 Automatic Search Engine 1.6.5b - videolisting.php?key Cross-Site Scripting source: https://www.securityfocus.com/bid/43336/info x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An...

x10 MP3 Automatic Search Engine 1.6.5b - '/templates/header1.php?id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43336/info x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of ...

x10 MP3 Automatic Search Engine 1.6.5 - '/includes/video_ad.php?pic_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43336/info x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of ...