Sienzo Digital Music Mentor - DSKernel2.dll ActiveX Control Stack Buffer Overflow

Sienzo Digital Music Mentor - DSKernel2.dll ActiveX Control Stack Buffer Overflow source: https://www.securityfocus.com/bid/23838/info Sienzo Digital Music Mentor is prone to multiple stack-based buffer-overflow vulnerabilities because the software fails to adequately check boundaries on data...

Sienzo Digital Music Mentor - 'DSKernel2.dll' ActiveX Control Stack Buffer Overflow

source: https://www.securityfocus.com/bid/23838/info Sienzo Digital Music Mentor is prone to multiple stack-based buffer-overflow vulnerabilities because the software fails to adequately check boundaries on data supplied to multiple ActiveX control methods. An attacker can exploit this issue to...

Code injection

admin/config.php in the music-on-hold module in freePBX 2.2.x allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the del parameter...

CVE-2007-2350

admin/config.php in the music-on-hold module in freePBX 2.2.x allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the del parameter...

CVE-2007-2350

The CVE concerns admin/config.php in the music-on-hold module of freePBX 2.2.x. It allows a remote authenticated administrator to execute arbitrary commands via shell metacharacters in the del parameter, indicating input handling/sanitization flaws in that file. Impact is potential remote command...

CVE-2007-2350: Undefined Security Weakness

admin/config.php in the music-on-hold module in freePBX 2.2.x allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the del parameter...

asterisk-inject.txt

I've found a code injection in the music-on-hold module at freePBX's portal. There are Inssuficient filters in the delete functions. Only " ' and ; are being filtered. Vulnerable Lines: 300: $rmcmd="rm -f "".$pathtodir."/". $del."""; 301: exec$rmcmd; Example code:...

[Full-disclosure] freePBX 2.2.x's Music-on-hold Remote Code Execution Injection

I've found a code injection in the music-on-hold module at freePBX's portal. There are Inssuficient filters in the delete functions. Only " ' and ; are being filtered. Vulnerable Lines: 300: $rmcmd="rm -f "".$pathtodir."/". $del."""; 301: exec$rmcmd; Example code:...

CVE-2007-1922

The Impulse Tracker IT and ScreamTracker 3 S3M modules in INMOD.DLL in AOL Nullsoft Winamp 5.33 allows remote attackers to execute arbitrary code via a crafted 1 .IT or 2 .S3M file containing integer values that are used as memory offsets, which triggers memory corruption...

Music website of hotlinking combat it! - Vulnerability warning-the black bar safety net

Today quite tired. Since the website is not going to sleep. Pack night! Do what? Didn't the spirit. Listen to the song. Interesting, ha ha--DJ! The last Cola to recommend a site, feel good. Here, for materials of narrative convenience I'll assume that one site: http://www.china. com OK! Let's Go!...

XLNC1 Radio Classical Music Nuke Portal Remote File Inc. Vuln.

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $ $ Title : XLNC1 Radio Classical Music Nuke Portal Remote File Inc. Vuln. $ Author : Gokhan $ Site : http://www.xlnc1.org/nuke $ Contact : [email protected] | [email protected] $ $ Vuln Code : iframe.php $ $...

xlnc-rfi.txt

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $ $ Title : XLNC1 Radio Classical Music Nuke Portal Remote File Inc. Vuln. $ Author : Gokhan $ Site : http://www.xlnc1.org/nuke $ Contact : [email protected] | [email protected] $ $ Vuln Code : iframe.php $ $...

Stack overflow

Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control NCTAudioFile2.dll, as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include 1 NCTsoft NCTAudioStudio, NCTAudioEdito...

CVE-2007-0018

Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control NCTAudioFile2.dll, as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include 1 NCTsoft NCTAudioStudio, NCTAudioEdito...

CVE-2007-0018

CVE-2007-0018 is a stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), triggered by an overly long argument to the SetFormatLikeSample() function. The flaw is a data validation failure that allows remote code execution when a user visits a malicious web...

Sienzo Digital Music Mentor ActiveX buffer overflow

Buffer overflow in NCTAudioFile2.AudioFile SetFormatLikeSample method...

[Full-disclosure] Secunia Research: Sienzo Digital Music Mentor NCTAudioFile2 ActiveX Control Buffer Overflow

====================================================================== Secunia Research 24/01/2007 - Sienzo Digital Music Mentor - - NCTAudioFile2 ActiveX Control Buffer Overflow - ====================================================================== Table of Contents Affected...

Jinzora 2.7 - INCLUDE_PATH Multiple Remote File Inclusions

Jinzora 2.7 - INCLUDEPATH Multiple Remote File Inclusions +------------------------------------------------------------------------------------------- + Jinzora +------------------------------------------------------------------------------------------- + Details: + Jinzora has several scripts...

Jinzora 2.7 - 'INCLUDE_PATH' Multiple Remote File Inclusions

+------------------------------------------------------------------------------------------- + Jinzora +------------------------------------------------------------------------------------------- + Details: + Jinzora has several scripts which do not initialize variables before using them to inclu...

Paristemi 0.8.3b (buycd.php) Remote File Include Vulnerability

+------------------------------------------------------------------------------------------- + Paristemi 0.8.3b buycd.php Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Vendor ............: http://www.paristemi.com/...