VLC Media Player <=1.0.6 Malformed Media File Crash PoC

No description provided by source. !/usr/bin/python VLC Media Player =1.0.6 Malformed Media File Crash PoC Found By: DrIDE Tested: Windows 7, Ubuntu 9, OSX 10.6.X Download: http://www.videolan.org Notes: Register overwrites seem very unpredictable at best... Greets: Offsec and Corelan Teams...

VLC Media Player 1.0.6 Crash Proof Of Concept

!/usr/bin/python VLC Media Player =1.0.6 Malformed Media File Crash PoC Found By: DrIDE Tested: Windows 7, Ubuntu 9, OSX 10.6.X Download: http://www.videolan.org Notes: Register overwrites seem very unpredictable at best... Greets: Offsec and Corelan Teams ldfheader =...

VideoLAN VLC Media Player 1.0.6 - .avi Media File Crash (PoC)

VideoLAN VLC Media Player 1.0.6 - .avi Media File Crash PoC !/usr/bin/python VLC Media Player =1.0.6 Malformed Media File Crash PoC Found By: DrIDE Tested: Windows 7, Ubuntu 9, OSX 10.6.X Download: http://www.videolan.org Notes: Register overwrites seem very unpredictable at best... Greets: Offse...

VideoLAN VLC Media Player 1.0.6 - '.avi' Media File Crash (PoC)

!/usr/bin/python VLC Media Player =1.0.6 Malformed Media File Crash PoC Found By: DrIDE Tested: Windows 7, Ubuntu 9, OSX 10.6.X Download: http://www.videolan.org Notes: Register overwrites seem very unpredictable at best... Greets: Offsec and Corelan Teams ldfheader =...

Fast Free Media 1.3 Adult Site Shell Upload

======================================================================================== | Title : Fast Free Media V 1.3 Adult Site Upload Shell Exploiot | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Script : Powered by FastFreeMedia.com All Videos Copyright ©...

Debian DSA-2045-1 : libtheora - integer overflow

Bob Clary, Dan Kaminsky and David Keeler discovered that in libtheora, a video library part of the Ogg project, several flaws allow context-dependent attackers via a large and specially crafted media file, to cause a denial of service crash of the player using this library, and possibly arbitrary...

DSA-2045-1 libtheora - arbitrary code execution

Bulletin has no description...

Microsoft Windows Media Player ActiveX memory corruption

Memory corruption on media file parsing...

Windows Media Player Codec检索释放后使用漏洞（MS10-027）

BUGTRAQ ID: 39351 CVE ID: CVE-2010-0268 Windows Media Player是微软操作系统中默认捆绑的媒体播放器。 Windows Media Player中用于检索未知fourCC压缩代码codec的功能中存在安全漏洞。当嵌入式的Windows Media Player控件试图播放包含有未知类型codec的媒体文件时，就会向Microsoft提交请求检索必须的功能。如果在此期间从网页删除了这个控件，清空例程会调用已经释放的指针。 如果Windows Media...

Microsoft Windows Media Player ActiveX Codec Retrieval (CVE-2010-0268)

Microsoft Windows Media Player is a feature of the Windows operating system for personal computers. It is used for playing audio and video. A remote code execution vulnerability has been reported in the Windows Media Player's ActiveX control. The vulnerability is due to an error in the Windows...

Microsoft Windows Media Player Codec Retrieval Dangling Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows Media Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page. The specific flaw exists within the functionality for...

Apple Quicktime Heap Overflow (CVE-2004-0431)

There is an integer overflow in the media file parsing mechanism within Apple QuickTime, a tool that allows users to play, create, and deliver multimedia. There is a vulnerability in the media file parser within Apple QuickTime. It is possible for a remote attacker to execute arbitrary code on th...

Debian DSA-2000-1 : ffmpeg-debian - several vulnerabilities

Several vulnerabilities have been discovered in ffmpeg, a multimedia player, server and encoder, which also provides a range of multimedia libraries used in applications like MPlayer : Various programming errors in container and codec implementations may lead to denial of service or the execution...

RealNetworks RealPlayer RealMedia File Format Processing Heap Corruption (CVE-2007-5081)

RealPlayer and RealOne Player are media player applications developed by RealNetworks, Inc. These applications are capable of playing back numerous multimedia file formats. The application can open media files from local file system or network servers. A remote heap corruption vulnerability exist...

CVE-2009-4243

RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allow remote attackers to have an unspecified impact via a crafted media file that uses...

CVE-2009-4243

RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allow remote attackers to have an unspecified impact via a crafted media file that uses...

CVE-2009-4243

RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allow remote attackers to have an unspecified impact via a crafted media file that uses...

CVE-2009-4243

RealPlayer/Helix vulnerability CVE-2009-4243 stems from an integer/heap overflow in the handling of HTTP chunked transfer encoded media. Affects RealPlayer 10–11 (Windows, Mac, Linux) and Helix Player 10.x. Remote code execution could be possible as described by multiple advisories; exploitation ...

RealPlayer皮肤和媒体文件解析多个缓冲区溢出漏洞

BUGTRAQ ID: 37880 CVE ID: CVE-2009-4241,CVE-2009-4242,CVE-2009-4243,CVE-2009-4244,CVE-2009-4245,CVE-2009-4257,CVE-2009-4248,CVE-2009-4247,CVE-2009-4246 RealPlayer是一款流行的多媒体播放器。 RealPlayer解析畸形的皮肤或媒体文件时存在多个缓冲区溢出漏洞，用户受骗打开了恶意的文件就可以触发这些漏洞，导致执行任意指令。 1...

USN-874-1: Firefox 3.5 and Xulrunner 1.9.1 vulnerabilities

Jesse Ruderman, Josh Soref, Martijn Wargers, Jose Angel, Olli Pettay, and David James discovered several flaws in the browser and JavaScript engines of Firefox. If a user were tricked into viewing a malicious website, a remote attacker could cause a denial of service or possibly execute arbitrary...