Mandriva Security Advisory MDVSA-2009:319 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory MDVSA-2009:319. OpenVAS Vulnerability Test $Id: mdksa2009319.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:319 xine-lib Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...

FreeBSD : wordpress -- multiple vulnerabilities (0640198a-d117-11de-b667-0030843d3802)

secunia reports : The security issue is caused due to the wpcheckfiletype function in /wp-includes/functions.php improperly validating uploaded files. This can be exploited to execute arbitrary PHP code by uploading a malicious PHP script with multiple extensions. Successful exploitation of this...

Windows Media Player Plugin: Local File Detection Vulnerability

Windows Media Player Plugin: Local File Detection Vulnerability A design flaw in Windows Media Player 11 allows a remote attacker to determine the presence of local files programs, documents, etc.. I sent an e-mail to Microsoft nearly a year ago but they never responded… Windows Media Player...

CVE-2009-2525

CVE-2009-2525 is the Windows History: The Windows Media Runtime Heap Corruption Vulnerability. A remote code execution flaw exists in Windows Media Runtime (DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager) caused by improper initialization of unspecifi...

Microsoft Windows media files processing memory corruption

Memory corruptions and integer overflows on AVI processing...

Django Directory Traversal Vulnerability (Linux)

This host has Django installed and is prone to Directory Traversal Vulnerability. OpenVAS Vulnerability Test $Id: gbdjangodirtraversalvulnlin.nasl 5904 2017-04-10 06:18:08Z teissa $ Django Directory Traversal Vulnerability Linux Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks...

Directory traversal

The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a crafted URL...

CVE-2009-1539

CVE-2009-1539 concerns a DirectShow DirectX/Quartz component (quartz.dll) in Windows 2000 SP4, XP SP2/SP3, and Server 2003 SP2. The QuickTime Movie Parser Filter fails to validate certain size fields in QuickTime media files, enabling remote code execution via a crafted file or streaming content....

Microsoft Security Bulletin MS09-028 - Critical Vulnerabilities in Microsoft DirectShow Could Allow Remote Code Execution (971633)

Microsoft Security Bulletin MS09-028 - Critical Vulnerabilities in Microsoft DirectShow Could Allow Remote Code Execution 971633 Published: July 14, 2009 Version: 1.0 General Information Executive Summary This security update resolves one publicly disclosed vulnerability and two privately reporte...

Microsoft Windows Media Player 11 - ScriptCommand Multiple Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/35335/info Microsoft Windows Media Player is prone to multiple information-disclosure vulnerabilities because it fails to properly restrict access to certain functionality when handling media files. An attacker can exploit these vulnerabilities to obtain...

[USN-771-1] libmodplug vulnerabilities

=========================================================== Ubuntu Security Notice USN-771-1 May 07, 2009 libmodplug vulnerabilities CVE-2009-1438, CVE-2009-1513 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS...

Mandriva Linux Security Advisory : xine-lib (MDVSA-2009:020)

Failure on Ogg files manipulation can lead remote attackers to cause a denial of service by using crafted files CVE-2008-3231. Failure on manipulation of either MNG or Real or MOD files can lead remote attackers to cause a denial of service by using crafted files CVE: CVE-2008-5233. Heap-based...

Microsoft DirectX DirectShow MJPEG Video Decompression Remote Code Execution Vulnerability

Description Microsoft DirectX is prone to a remote code-execution vulnerability because the DirectShow component fails to properly handle compressed media files. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the user running the application...

Ubuntu: Security Advisory (USN-746-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Media Commands (M3U,M3l,TXT,LRC Files) Local Heap Overflow PoC

No description provided by source. !usr/bin/perl Discovered & Coded by : Hakxer Media Commands M3U,M3l,TXT,LRC Files Crash PoC Greetz : Allah , ProViDoR , Egyptian x Hacker Team : Egy coders Team Download/http://www.mediacommands.com/download.html Description : Import Hakxer.Ext Into program...

CVE-2008-5745

Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player WMP 9, 10, and 11, including 11.0.5721.5260, allows remote attackers to cause a denial of service application crash via a crafted 1 WAV, 2 SND, or 3 MID file. NOTE: this has been incorrectly reported as a...

[TKADV2008-014] MPlayer TwinVQ Processing Stack Buffer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: MPlayer TwinVQ Processing Stack Buffer Overflow Vulnerability Advisory ID: TKADV2008-014 Revision: 1.0 Release Date: 2008/12/14 Last Modified: 2008/12/14 Date Reported: 2008/12/07 Author: Tobias Klein tk at trapkit.de Affected Software:...

CVE-2007-6718

MPlayer, possibly 1.0rc1, allows remote attackers to cause a denial of service SIGSEGV and application crash via 1 a malformed MP3 file, as demonstrated by lol-mplayer.mp3; 2 a malformed Ogg Vorbis file, as demonstrated by lol-mplayer.ogg; 3 a malformed MPEG-1 file, as demonstrated by...

MPlayer - .AAC File Handling Denial of Service

MPlayer - .AAC File Handling Denial of Service source: https://www.securityfocus.com/bid/34136/info MPlayer is prone to multiple denial-of-service vulnerabilities when handling malformed media files. Successfully exploiting this issue allows remote attackers to deny service to legitimate users...

Update Protection against Microsoft MJPEG Decoder Vulnerability (MS08-033)

A remote code execution vulnerability has been reported in the way that the Windows MJPEG Codec handles MJPEG streams in media files. MJPEG is a media file that contains a number of JPEG images that have been connected together to create a video stream. A remote attacker may exploit this...