565 matches found
ZDI-06-020: Apple iTunes AAC File Parsing Integer Overflow Vulnerability
ZDI-06-020: Apple iTunes AAC File Parsing Integer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-020.html June 29, 2006 -- CVE ID: CVE-2006-1467 -- Affected Vendor: Apple -- Affected Products: iTunes -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers...
Apple iTunes AAC File Parsing Integer Overflow Vulnerability
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Apple iTunes. Exploitation requires an attacker to convince a target user into opening a malicious play list file. The specific flaw exists during the processing of malicious AAC media files such as those...
US-CERT Technical Cyber Security Alert TA06-011A -- Apple QuickTime Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA06-011A Apple QuickTime Vulnerabilities Original release date: January 11, 2006 Last revised: January 11, 2006 Source: US-CERT Systems Affected Apple QuickTime on systems running Apple Mac O...
Apple QuickTime fails to properly handle corrupt media files
Overview Apple QuickTime contains a heap overflow vulnerability in the handling of media files which may allow a remote unauthenticated attacker to execute arbitrary code or cause a denial of service on a vulnerable system. Description Apple's QuickTime Player is multimedia software that allows...
QuickTime < 7.0.4 Multiple Vulnerabilities (Windows)
The remote Windows host is running a version of QuickTime prior to 7.0.4. The remote version of QuickTime is vulnerable to various buffer overflows involving specially crafted image and media files. An attacker may be able to leverage these issues to execute arbitrary code on the remote host by...
CVE-2005-4092
Summary of CVE-2005-4092 and related advisories: This issue is a heap-based overflow in Apple QuickTime/ iTunes involving QuickTime.qts, exploitable via crafted QuickTime movie files. The vulnerabilities concern the handling of the Movie Resource atom with a large size and the STSD (Sample Descri...
Microsoft DirectShow buffer overflow
Overview A buffer overflow in Microsoft DirectShow may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft DirectShow is a programming architecture for streaming multimedia on the Microsoft Windows platform. An input validation error in...
CVE-2005-1712
Unknown vulnerability in Serendipity 0.8, when used with multiple authors, allows unprivileged authors to upload arbitrary media files...
CVE-2005-1712
CVE-2005-1712 affects Serendipity 0.8; when used with multiple authors, unprivileged authors can upload arbitrary media files. The provided documents state the vulnerability and affected scenario but do not disclose root cause, exploit details, or a remediation. No explicit patch information is g...
CVE-2005-1712
Unknown vulnerability in Serendipity 0.8, when used with multiple authors, allows unprivileged authors to upload arbitrary media files...
Serendipity < 0.8.1 Multiple Vulnerabilities
According to its banner, the version of Serendipity installed on the remote host is affected by multiple vulnerabilities : - Unauthorized File Upload Vulnerability There is a vulnerability that may allow editors to upload arbitrary media files when they otherwise would not be allowed to do so. -...
mpg321: Format string vulnerability
Background mpg321 is a GPL replacement for mpg123, a command line audio player with support for ID3. ID3 is a tagging system that allows metadata to be embedded within media files. Description A routine security audit of the mpg321 package revealed a known security issue remained unpatched. The...
CVE-2004-1396
Winamp 5.07 and possibly other versions, allows remote attackers to cause a denial of service application crash or CPU consumption via 1 an mp4 or m4a playlist file that contains invalid tag data or 2 an invalid .nsv or .nsa file...
GLSA-200409-30 : xine-lib: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200409-30 xine-lib: Multiple vulnerabilities xine-lib contains two stack-based overflows and one heap-based overflow. In the code reading VCD disc labels, the ISO disc label is copied into an unprotected stack buffer of fixed size...
QuickTime < 7.6.2 Multiple Vulnerabilities
Binary data 5042.prm...
[VulnWatch] Multiple vulnerabilities in RealPlayer (#NISR11062004)
NGSSoftware Insight Security Research Advisory Name: REAL One Player code execution through malformed media file Systems Affected: RealOne Player English, RealOne Player v2 all languages, RealPlayer 10 English, German and Japanese, RealPlayer 8 all languages, RealPlayer Enterprise all versions,...
[VulnWatch] Nullsoft Winamp 'in_mod.dll' Heap Overflow
NGSSoftware Insight Security Research Advisory Name: Nullsoft Winamp 'inmod.dll' Heap Overflow Systems Affected: Nullsoft Winamp versions 2.91 to 5.02 possibly older versions, although this is not confirmed Severity: High Risk Vendor URL: http://www.winamp.com/ Author: Peter Winter-Smith...
Microsoft Windows SMB Share Hosting Possibly Copyrighted Material
This plugin displays a list of media files such as .mp3, .ogg, .mpg, .avi which have been found on the remote SMB shares. Some of these files may contain copyrighted materials, such as commercial movies or music files, that are being shared without the owner's permission. If any of these files...
Web Server Potentially Hosting Copyrighted Material
The remote web server is hosting media mp3, wav, avi, or asf files that might be infringing on the owners' copyright. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11778; scriptversion"$Revision: 1.25 $"; scriptcvsdate"$Date: 2011/03/18 18:07:04 $";...
Opera 7 - Image Rendering HTML Injection
source: https://www.securityfocus.com/bid/6756/info It has been reported that, when generating HTML to display images or embedded media, Opera does not correctly format the provided URL or sufficiently encode URLs to local files. As a result of this lack of sanitization Opera is vulnerable to HTM...