nullsoft-overflow.txt

!/bin/perl Nullsoft Winamp MP4 tags Stack Overflow 0-day discovered and exploited by SYS 49152 Tested on win XP SP2 ENG Tuned for Nullsoft Winamp 5.32 d.i. Shell on port 49152 usage: well, not much fun for you kids here .. to get the shell you have to use ALT+3 and press UPDATE. Instead this one ...

NullSoft Winamp 5.32 - .MP4 Tags Stack Overflow

NullSoft Winamp 5.32 - .MP4 Tags Stack Overflow !/bin/perl Nullsoft Winamp MP4 tags Stack Overflow 0-day discovered and exploited by SYS 49152 Tested on win XP SP2 ENG Tuned for Nullsoft Winamp 5.32 d.i. Shell on port 49152 usage: well, not much fun for you kids here .. to get the shell you have ...

Media Player Classic 6.4.9 MP4 File Stack Overflow Exploit

Exploit for unknown platform in category local exploits ========================================================== Media Player Classic 6.4.9 MP4 File Stack Overflow Exploit ========================================================== !/bin/perl Media Player Classic 6.4.9 MP4 Stack Overflow 0-day...

WinAMP buffer overflow

Buffer overflow on MP4 files parsing...

Apple iTunes buffer overflow

Buffer overflow on MP4 / AAC files covr tag parsing...

iTunes 7.3.x - Heap overflow in album cover parsing

iSEC Partners Security Advisory - 2007-005-itunes https://www.isecpartners.com -------------------------------------------- iTunes 7.3.x - Heap overflow in album cover parsing Vendor: Apple, Inc. Vendor URL: http://www.apple.com Versions affected: Confirmed in iTunes 7.3.2 Systems Affected:...

iTunes < 7.4 Malformed Music File Heap Overflow (Mac OS X)

The remote host is running iTunes, a popular jukebox program. The remote version of iTunes is vulnerable to a heap overflow when it parses a specially crafted MP4/AAC file. By tricking a user into opening such a file, a remote attacker may be able to leverage this issue to execute arbitrary code ...

Apple iTunes < 7.4 Malformed Music File Heap Overflow (credentialed check)

The remote host is running Apple iTunes, a popular media player. The remote version of iTunes is vulnerable to a heap overflow when it parses a specially crafted MP4/AAC file. By tricking a user into opening such a file, a remote attacker may be able to leverage this issue to execute arbitrary co...

CVE-2007-3752

Heap-based buffer overflow in Apple iTunes before 7.4 allows remote attackers to cause a denial of service application crash or execute arbitrary code via crafted album cover art in the covr atom of an MP4/AAC file...

Heap overflow

Heap-based buffer overflow in Apple iTunes before 7.4 allows remote attackers to cause a denial of service application crash or execute arbitrary code via crafted album cover art in the covr atom of an MP4/AAC file...

CVE-2007-3752

Apple iTunes

CVE-2007-3752

Heap-based buffer overflow in Apple iTunes before 7.4 allows remote attackers to cause a denial of service application crash or execute arbitrary code via crafted album cover art in the covr atom of an MP4/AAC file...

iTunes < 7.4.0 MP4/AAC File covr atom Overflow

Binary data 4204.prm...

Winamp < 5.35 MP4 File Handling Buffer Overflow

The remote host is using Winamp, a popular media player for Windows. The version of Winamp installed on the remote Windows host reportedly contains a flaw involving its handling of 'MP4' files. If an attacker can trick a user on the affected host into opening a specially crafted MP4 file, this...

FTP Server Zipped .mp3 / .mp4 File Detection

Binary data 4042.prm...

FTP Server .mp3 / .mp4 Files Detection

Binary data 4008.prm...

Apple QuickTime Crafted Media File FlipFileTypeAtom_BtoN Integer Underflow (CVE-2007-2296)

MP4 is the official filename extension for MPEG-4 Part 14 files.These files are generally used to store digital audio and digital video streams.A vulnerability has been reported in Apple QuickTime. A remote attacker could trigger this vulnerability via a specially crafted MP4 file. Successful...

Winamp MP4文件解析缓冲区溢出漏洞

Winamp是一款流行的媒体播放器，支持多种文件格式。 Winamp在处理畸形格式的MP4文件时存在缓冲区溢出漏洞，本地或远程攻击者可能利用此漏洞执行任意指令。 Nullsoft Winamp 5.34a 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://download.nullsoft.com/winamp/client/wa5update.exe http://www.sebug.net/show-exp-1801.html...

Information disclosure

libmp4v2.dll in Winamp 5.02 through 5.34 allows user-assisted remote attackers to execute arbitrary code via a certain .MP4 file. NOTE: some of these details are obtained from third party information...

CVE-2007-2498

libmp4v2.dll in Winamp 5.02 through 5.34 allows user-assisted remote attackers to execute arbitrary code via a certain .MP4 file. NOTE: some of these details are obtained from third party information...