Memory corruption

IML32.dll in Adobe Shockwave Player before 11.5.8.612 does not properly parse .dir files, which allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a malformed file containing an invalid value, as demonstrated by a value at position 0x24C0 of a...

Memory corruption

IML32.dll in Adobe Shockwave Player before 11.5.8.612 does not properly parse .dir files, which allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a malformed file containing an invalid value, as demonstrated by a value at position 0x3712 of a...

VLC Media Player <=1.0.6 Malformed Media File Crash PoC

Exploit for windows platform in category dos / poc ======================================================= VLC Media Player =1.0.6 Malformed Media File Crash PoC ======================================================= !/usr/bin/python VLC Media Player =1.0.6 Malformed Media File Crash PoC Found B...

DEBIAN-CVE-2010-0829

Multiple array index errors in set.c in dvipng 1.11 and 1.12, and teTeX, allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a malformed DVI file...

Stack overflow

Stack-based buffer overflow in TraktorBeatport.exe 1.0.0.283 in Beatport Player 1.0.0.0 allows remote attackers to execute arbitrary code via a long string in a malformed playlist .m3u file...

AIMP 2.8.3 - '.m3u' Remote Stack Buffer Overflow

source: https://www.securityfocus.com/bid/38215/info AIMP is prone to a remote stack-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to execute arbitrary code in the context of the...

Stack overflow

Stack-based buffer overflow in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allows user-assisted remote attackers to execute arbitrary...

OpenOffice ".slk" File Parsing Null Pointer Vulnerability

Exploit for unknown platform in category dos / poc ========================================================= OpenOffice ".slk" File Parsing Null Pointer Vulnerability ========================================================= Product: OpenOffice Tested Vulnerable Versions: 3.1.1 and 3.1.0...

PlayMeNow 7.37.4 - .M3U Playlist File Buffer

PlayMeNow 7.37.4 - .M3U Playlist File Buffer / + Vulnerability: PlayMeNow Malformed M3U Playlist File Buffer Overflow + Product: PlayMeNow - media player. + Versions affected: Tested with 7.3 and 7.4 + Tested on: Windows XP Professional with Service Pack 2 + Author: Gr33nG0bL1n + Software Link:...

CVE-2009-4228

Stack consumption vulnerability in ubound.c in Xfig 3.2.5b and earlier allows remote attackers to cause a denial of service application crash via a long string in a malformed .fig file that uses the 1.3 file format, possibly related to the readfpfig function in fread.c...

Format string

Stack consumption vulnerability in ubound.c in Xfig 3.2.5b and earlier allows remote attackers to cause a denial of service application crash via a long string in a malformed .fig file that uses the 1.3 file format, possibly related to the readfpfig function in fread.c...

DEBIAN-CVE-2009-4228

Stack consumption vulnerability in ubound.c in Xfig 3.2.5b and earlier allows remote attackers to cause a denial of service application crash via a long string in a malformed .fig file that uses the 1.3 file format, possibly related to the readfpfig function in fread.c...

CVE-2009-4227

Stack-based buffer overflow in the read13textobject function in freadold.c in Xfig 3.2.5b and earlier, and in the readtextobject function in read13.c in fig2dev in Transfig 3.2.5a and earlier, allows remote attackers to execute arbitrary code via a long string in a malformed .fig file that uses t...

CVE-2009-1371

The CLIISCONTAINED macro in libclamav/others.h in ClamAV before 0.95.1 allows remote attackers to cause a denial of service application crash via a malformed file with UPack encoding...

CVE-2009-1371

CVE-2009-1371 affects ClamAV before 0.95.1. The vulnerability arises from the CLI_ISCONTAINED macro in libclamav/others.h, allowing remote attackers to cause a denial of service (application crash) via a malformed file with UPack encoding. OpenVAS/Nessus entries corroborate related ClamAV issues ...

Microsoft Office Visio File Multiple Memory Corruptions (MS09-005; CVE-2009-0095; CVE-2009-0096; CVE-2009-0097)

Microsoft Visio is a diagram creation software for Microsoft Windows. Multiple remote code execution vulnerabilities have been reported in Microsoft Visio. A remote attacker could trigger these flaws by convincing the victim to open a specially crafted Visio file. Successful exploitation of these...

BitDefender Cross Site Scripting

Application: BitDefender Internet Security 2009 OS: Windows Xp All patches a day ------------------------------------------------------ 1 - Description 2 - Vulnerability 3 - POC/EXPLOIT ------------------------------------------------------ Description BitDefender Internet Security is a security...

Workaround for Microsoft Office Visio Malformed File Parsing Remote Code Execution Vulnerabilities (MS09-005)

Multiple remote code execution vulnerabilities have been reported in Microsoft Visio. Microsoft Visio is a diagram creation software for Microsoft Windows. A remote attacker can exploit these vulnerabilities via a specially crafted Visio file. Successful exploitation may allow execution of...

CVE-2009-0386

Heap-based buffer overflow in the qtdemuxparsesamples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins aka gst-plugins-good 0.10.9 through 0.10.11 might allow remote attackers to execute arbitrary code via crafted Composition Time To Sample ctts atom data in a malformed QuickTime medi...

PT-2008-4864 · Microsoft · Windows Xp +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 2000 SP4 through 2000 SP4, XP SP2 through XP SP3, Server 2003 SP1 through Server 2003 SP2, Vista Gold through Vista SP1, and Server 2008 Description: A heap-based buffer overflow in the GDI API allows...