CVE-2016-9266

listmp3.c in libming 0.4.7 allows remote attackers to unspecified impact via a crafted mp3 file, which triggers an invalid left shift...

CVE-2016-9264

Buffer overflow in the printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service out-of-bounds read via a crafted mp3 file...

CVE-2016-9266

listmp3.c in libming 0.4.7 allows remote attackers to unspecified impact via a crafted mp3 file, which triggers an invalid left shift...

Buffer overflow

Buffer overflow in the printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service out-of-bounds read via a crafted mp3 file...

UBUNTU-CVE-2016-9266

listmp3.c in libming 0.4.7 allows remote attackers to unspecified impact via a crafted mp3 file, which triggers an invalid left shift...

UBUNTU-CVE-2016-9264

Buffer overflow in the printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service out-of-bounds read via a crafted mp3 file...

CVE-2016-9264

Buffer overflow in the printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service out-of-bounds read via a crafted mp3 file...

CVE-2016-9266

listmp3.c in libming 0.4.7 allows remote attackers to unspecified impact via a crafted mp3 file, which triggers an invalid left shift...

CVE-2016-9266

CVE-2016-9266 affects libming 0.4.7, where listmp3.c allows a remote attacker to cause an invalid left shift via a crafted MP3 file. The vulnerability is described as having an unspecified impact in the initial report, but multiple connected sources document a fix in libming 0.4.8. Fedora advisor...

CVE-2016-9265

CVE-2016-9265 affects Libming 0.4.7. The vulnerability is in the printMP3Headers function (listmp3.c) that can be triggered by a crafted MP3 file, causing a divide-by-zero error and an application crash (DoS). Exploitation is via a specially crafted MP3; no other impact is stated. Public advisori...

CVE-2016-9265

The printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mp3 file...

Easy MOV Converter 1.4.24 - Local Buffer Overflow (SEH)

Easy MOV Converter 1.4.24 - Local Buffer Overflow SEH !/usr/bin/python Exploit Title : Easy MOV Converter - 'Enter User Name' Field SEH Overwrite POC Date : 12/03/2017 Exploit Author : Muhann4d Vendor Homepage : http://www.divxtodvd.net/ Software Link : http://www.divxtodvd.net/easymovconverter.e...

WordPress audio playlist functionality is affected by Cross-Site Scripting

Abstract Two Cross-Site Scripting vulnerabilities exists in the playlist functionality of WordPress. These issues can be exploited by convincing an Editor or Administrator into uploading a malicious MP3 file. Once uploaded the issues can be triggered by a Contributor or higher using the playlist...

WordPress 4.5.3 Audio Playlist Cross Site Scripting

------------------------------------------------------------------------ WordPress audio playlist functionality is affected by Cross-Site Scripting ------------------------------------------------------------------------ Yorick Koster, July 2016...

Mp3splt Denial of Service Vulnerability

Mp3splt is a set of mp3 music cutting command line program. A security vulnerability exists in the 'freeoptions' function in the optionsmanager.c file in Mp3splt version 2.6.2. A remote attacker can exploit this vulnerability to cause a denial of service invalid release and crash with the help of...

Windows Exploit development tutorial series--stack injection a-vulnerability warning-the black bar safety net

! Foreword Welcome to the heap spray tutorial the first part. This Part I will introduce the IE under typical heap spray technique, the second part will introduce the precise injection and IE8 under UAF vulnerabilities. It is worth mentioning that, the stack injection is just a payload Delivery...

CVE-2016-7499

The sbrmakefmaster function in aacsbr.c in Libav 11.7 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mp3 file...

CVE-2016-7477

The ffputpixels8xy2mmx function in rndtemplate.c in Libav 11.7 allows remote attackers to cause a denial of service invalid memory access and crash via a crafted mp3 file. NOTE: this issue was originally reported as involving a NULL pointer dereference...

Null pointer dereference

The getvlc2 function in getbits.h in Libav 11.9 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted mp3 file. NOTE: this issue exists due to an incomplete fix for CVE-2016-8675...

CVE-2016-8676

The getvlc2 function in getbits.h in Libav 11.9 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted mp3 file. NOTE: this issue exists due to an incomplete fix for CVE-2016-8675...