61 matches found
Libmodplug 0.8.8.2 - .abc Stack Buffer Overflow (PoC)
Libmodplug 0.8.8.2 - .abc Stack Buffer Overflow PoC include include include / libmodplug = 0.8.8.2 .abc stack-based buffer overflow poc http://modplug-xmms.sourceforge.net/ by: epiphant this exploits one of many overflows in loadabc.cpp lol vlc media player uses libmodplug greets: defrost, babi,...
DSA-2226-1 libmodplug - buffer overflow
Bulletin has no description...
Fedora Update for libmodplug FEDORA-2011-5204
Check for the Version of libmodplug OpenVAS Vulnerability Test Fedora Update for libmodplug FEDORA-2011-5204 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
[SECURITY] Fedora 14 Update: libmodplug-0.8.8.2-1.fc14
Modplug mod music file format library...
VideoLAN VLC ModPlug ReadS3M Stack Buffer Overflow
This module exploits an input validation error in libmodplugin as included with VideoLAN VLC 1.1.8. All versions prior to version 1.1.9 are affected. By creating a malicious S3M file, a remote attacker could execute arbitrary code. Although other products that bundle libmodplug may be vulnerable,...
GLSA-200907-07 : ModPlug: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-200907-07 ModPlug: User-assisted execution of arbitrary code Two vulnerabilities have been reported in ModPlug: dummy reported an integer overflow in the CSoundFile::ReadMed function when processing a MED file with a crafted song...
ModPlug: User-assisted execution of arbitrary code
Background ModPlug is a library for playing MOD-like music. Description Two vulnerabilities have been reported in ModPlug: dummy reported an integer overflow in the CSoundFile::ReadMed function when processing a MED file with a crafted song comment or song name, which triggers a heap-based buffer...
[SECURITY] Fedora 10 Update: libmodplug-0.8.7-1.fc10
Modplug mod music file format library...
Mandriva Update for libmodplug MDKSA-2007:001 (libmodplug)
Check for the Version of libmodplug OpenVAS Vulnerability Test Mandriva Update for libmodplug MDKSA-2007:001 libmodplug Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...
Mandriva Update for libmodplug MDKSA-2007:001 (libmodplug)
Check for the Version of libmodplug OpenVAS Vulnerability Test Mandriva Update for libmodplug MDKSA-2007:001 libmodplug Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...
GLSA-200612-04 : ModPlug: Multiple buffer overflows
The remote host is affected by the vulnerability described in GLSA-200612-04 ModPlug: Multiple buffer overflows Luigi Auriemma has reported various boundary errors in loadit.cpp and a boundary error in the 'CSoundFile::ReadSample' function in sndfile.cpp. Impact : A remote attacker can entice a...
ModPlug: Multiple buffer overflows
Background ModPlug is a library for playing MOD-like music. Description Luigi Auriemma has reported various boundary errors in loadit.cpp and a boundary error in the "CSoundFile::ReadSample" function in sndfile.cpp. Impact A remote attacker can entice a user to read crafted modules or ITP files,...
MODPlug Tracker多个缓冲区溢出漏洞
MODPlug Tracker(也称为OpenMPT)允许用户在基于Windows的PC上创建音乐。 OpenMPT的ReadITProject函数没有过滤ITP文件中的文本字段,允许攻击者覆盖全局变量,执行恶意代码。请注意libmodplug中不支持ITP文件。 soundlib/Loadit.cpp中的漏洞代码: BOOL CSoundFile::ReadITProjectLPCBYTE lpStream, DWORD dwMemLength ... // Song name // name string length...
CVE-2006-4192
Multiple buffer overflows in MODPlug Tracker OpenMPT 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via 1 long strings in ITP files used by the CSoundFile::ReadITProject functi...
DEBIAN-CVE-2006-4192
Multiple buffer overflows in MODPlug Tracker OpenMPT 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via 1 long strings in ITP files used by the CSoundFile::ReadITProject functi...
CVE-2006-4192
Multiple buffer overflows in MODPlug Tracker OpenMPT 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via 1 long strings in ITP files used by the CSoundFile::ReadITProject functi...
CVE-2006-4192
CVE-2006-4192 is a buffer overflow vulnerability in libmodplug modules embedded in GStreamer (via MODPlug Tracker/OpenMPT usage) that could allow remote code execution when processing crafted ITProject/AMF files. Connected advisories (RHSA-2011:0477 and related OpenVAS/Nessus entries) describe an...
CVE-2006-4192
Multiple buffer overflows in MODPlug Tracker OpenMPT 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via 1 long strings in ITP files used by the CSoundFile::ReadITProject functi...
CVE-2006-4192
Multiple buffer overflows in MODPlug Tracker OpenMPT 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via 1 long strings in ITP files used by the CSoundFile::ReadITProject functi...
CVE-2006-4192
Multiple buffer overflows in MODPlug Tracker OpenMPT 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via 1 long strings in ITP files used by the CSoundFile::ReadITProject functi...