Multiple Musicmatch Jukebox bugs

Unauthorized files access, information leak...

Arbitrary file overwrite possible by Musicmatch ActiveX control

Hyperdose Security Advisory Name: Arbitrary file overwrite in Musicmatch Systems Affected: Musicmatch v10.00.2047 or earlier according to Yahoo v9.00.5059 and earlier are also affected Severity: Important Author: Robert Fly - [email protected] Advisory URL:...

Improper log file storage in Musicmatch software

Hyperdose Security Advisory Name: Improper Log file storage in Musicmatch software Systems Affected: Musicmatch v10.00.2047 or earlier according to Yahoo v9.00.5059 and earlier are also affected Severity: Moderate Author: Robert Fly - [email protected] Advisory URL:...

Trusted Site Cross Site Scripting Elevation of Privilege in Musicmatch

Hyperdose Security Advisory Name: Trusted Site Cross Site Scripting Elevation of Privilege in Musicmatch Systems Affected: Musicmatch v10.00.2047 or earlier according to Yahoo v9.00.5059 and earlier are also affected Severity: Moderate Author: Robert Fly - [email protected] Advisory URL:...

Trojan file issue in Musicmatch software

Hyperdose Security Advisory Name: Arbitrary file overwrite in Musicmatch Systems Affected: Musicmatch v10.00.2047 or earlier according to Yahoo v9.00.5059 and earlier are also affected Severity: Moderate Author: Robert Fly - [email protected] Advisory URL:...

MusicMatch Multiple Vulnerabilities

Binary data 2832.prm...

MusicMatch < 9.0.5066 / 10.0.2048 Multiple Vulnerabilities

The remote host is running MusicMatch, a music player. The remote version of this software is affected by a buffer overflow vulnerability as well as a cross-site scripting vulnerability. An attacker may exploit these flaws to execute arbitrary code on the remote host. C Tenable Network Security,...