CVE-2015-6792

The CVE-2015-6792 entry affects Google Chrome’s MIDI subsystem prior to 47.0.2526.106. The issue concerns improper handling of MIDI data sent by the MIDI subsystem, enabling a remote attacker to cause a crash or execute arbitrary code via unspecified vectors (cited in midi_manager.cc, midi_manage...

CVE-2015-6792

The MIDI subsystem in Google Chrome before 47.0.2526.106 does not properly handle the sending of data, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors, related to midimanager.cc, midimanageralsa.cc, and...

CVE-2015-6792: Undefined Security Weakness

The MIDI subsystem in Google Chrome before 47.0.2526.106 does not properly handle the sending of data, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors, related to midimanager.cc, midimanageralsa.cc, and...

chromium-browser: Use-After-free in MidiHost

Integer overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor.cc in Google Chrome before 47.0.2526.106 allows remote attackers to cause a denial of service or possibly have unspecified other impact via an RGBA pixel array with crafted dimensions, a different...

chromium-browser: Fixes from internal audits and fuzzing

The MIDI subsystem in Google Chrome before 47.0.2526.106 does not properly handle the sending of data, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors, related to midimanager.cc, midimanageralsa.cc, and...

Microsoft Windows Media Player MIDI Code Execution (MS12-004) - Ver2 (CVE-2012-0003)

A remote code execution vulnerability has been reported in Windows Media Player. The vulnerability is due to an error in Windows Media Player while handling specially crafted MIDI files. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted MIDI fi...

Google Chrome Denial of Service Vulnerability (CNVD-2015-01575)

Google Chrome is a popular WEB browser. A denial of service vulnerability exists in the 'MidiManagerUsb::DispatchSendMidiData' function in the Google Chrome media/midi/midimanagerusb.cc file, which can be exploited by remote attackers to renderer to provide access to an invalid port index, crashi...

Out-of-bounds

Array index error in the MidiManagerUsb::DispatchSendMidiData function in media/midi/midimanagerusb.cc in Google Chrome before 41.0.2272.76 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging renderer access to provide an invalid port index...

UBUNTU-CVE-2015-1232

Array index error in the MidiManagerUsb::DispatchSendMidiData function in media/midi/midimanagerusb.cc in Google Chrome before 41.0.2272.76 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging renderer access to provide an invalid port index...

CVE-2015-1232

Removed by vendor...

chromium-browser: Out-of-bounds write in media

Array index error in the MidiManagerUsb::DispatchSendMidiData function in media/midi/midimanagerusb.cc in Google Chrome before 41.0.2272.76 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging renderer access to provide an invalid port index...

Music-Animation-Machine-MIDI-Player-SEH

Exploit Title: Music Animation Machine MIDI Player MAMX SEH BOF Date 1/4/2011 Author: Acidgen mailto:spama t hgrayhat.se Software Link: http://www.musanim.com/player/MAMPlayer2006aug19035.zip Version: 2006aug19 Release 035 junk='\x41' 112 seh='\xeb\x06\x90\x90' pad='\x90' 10 junk2='\x42' 9496 Sor...

Apple Quicktime multiple security vulnerabilities

Memory corruptions on video decoding, MIDI and m4a...

QuickTime < 7.7.6 Multiple Vulnerabilities (Windows)

The version of Apple QuickTime installed on the remote Windows host is prior to 7.7.6. It is, therefore, affected by the following vulnerabilities : - A memory corruption flaw exists when handling specially crafted RLE encoded videos due to user-supplied input not being properly sanitized...

Apple QuickTime MIDI Heap Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing o...

CVE-2014-4350

Buffer overflow in QT Media Foundation in Apple OS X before 10.9.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MIDI file...

Buffer overflow

Buffer overflow in QT Media Foundation in Apple OS X before 10.9.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MIDI file...

CVE-2014-4350

CVE-2014-4350: Buffer overflow in QT Media Foundation on Apple OS X before 10.9.5 allows remote code execution or denial of service via a crafted MIDI file. Root cause: memory corruption from MIDI handling in QT Media Foundation. Affected: OS X versions prior to 10.9.5. Impact: arbitrary code exe...

CVE-2014-4350

Buffer overflow in QT Media Foundation in Apple OS X before 10.9.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MIDI file...

CVE-2014-4350: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in QT Media Foundation in Apple OS X before 10.9.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MIDI file...