CVE-2014-3443

JetMPAd.ax in JetAudio 8.1.1 and earlier allows remote attackers to cause a denial of service crash via a crafted .ogg file...

Code injection

JetMPAd.ax in JetAudio 8.1.1 and earlier allows remote attackers to cause a denial of service crash via a crafted .ogg file...

CVE-2014-3443

JetMPAd.ax in JetAudio 8.1.1 and earlier allows remote attackers to cause a denial of service crash via a crafted .ogg file...

CVE-2014-3443

CVE-2014-3443 affects JetAudio versions 8.1.1 and earlier, via a vulnerability in the JetMPAd.ax component that can cause a denial of service when processing a crafted .ogg file. The underlying issue is a memory-handling/parse condition leading to a crash, with attacker-controlled input delivered...

KLA10421 DoS vulnerability in JetAudio

An unspecified vulnerability was found in JetAudio. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed OGG file. Original advisories - Exploitation Public exploits exist for this vulnerability. Relate...

JetAudio 8.1.1 - .ogg Crash (PoC)

JetAudio 8.1.1 - .ogg Crash PoC ''' Exploit Title: JetAudio memory corruption in latest Version 8.1.1 Date: 2014/05/08 Exploit Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage: www.jetaudio.com Version: Version 8.1.1 and prior to that Tested...

JetAudio 8.1.1 - '.ogg' Crash (PoC)

''' Exploit Title: JetAudio memory corruption in latest Version 8.1.1 Date: 2014/05/08 Exploit Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage: www.jetaudio.com Version: Version 8.1.1 and prior to that Tested on: Windows Xp Sp 3 x86 Found by...

GOM Player 2.2.57.5189 - '.ogg' Crash (PoC)

''' Exploit Title: Gomplayer Memory Corruption vulnerability latest Version 2.2.57.5189 Date: 2014/05/06 Exploit Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage: www.gomlab.com Software Link:...

GOM Player 2.2.57.5189 - .ogg Crash (PoC)

GOM Player 2.2.57.5189 - .ogg Crash PoC ''' Exploit Title: Gomplayer Memory Corruption vulnerability latest Version 2.2.57.5189 Date: 2014/05/06 Exploit Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage: www.gomlab.com Software Link:...

Jet Audio 8.1.1 Memory Corruption

Exploit Title: JetAudio memory corruption in latest Version 8.1.1 Date: 2014/05/08 Exploit Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage: www.jetaudio.com Software Link:...

GOM Player 2.2.57.5189 Memory Corruption

GOM Player version 2.2.57.5189 suffers from a memory corruption vulnerability. Exploit Title: Gomplayer Memory Corruption vulnerability latest Version 2.2.57.5189 Date: 2014/05/06 Exploit Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage:...

GOM Player 2.2.57.5189 Memory Corruption

Exploit Title: Gomplayer Memory Corruption vulnerability latest Version 2.2.57.5189 Date: 2014/05/06 Exploit Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage: www.gomlab.com Software Link:...

Hanso Converter 2.4.0 - 'ogg' Buffer Overflow (Denial of Service)

!/usr/bin/env ruby coding:UTF-8 Exploit Title:Hanso Converter 2.4.0 Buffer OverflowDoS Author:Necmettin COSKUN = twitter.com/babayarisi Vendor :www.hansotools.com Software link:http://www.hansotools.com/downloads/hanso-converter-setup.exe version: 2.4.0 Tested on: windows XP sp2 DENEME = "A" 1337...

Debian Security Advisory DSA 2406-1 (icedove - several vulnerabilities)

Several vulnerabilities have been discovered in Icedove, Debian's variant of the Mozilla Thunderbird code base. CVE-2011-3670Icedove does not not properly enforce the IPv6 literal address syntax, which allows remote attackers to obtain sensitive information by making XMLHttpRequest calls through ...

Oracle Linux 5 : libvorbis (ELSA-2009-1219)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-1219 advisory. 1:1.1.2-3.el5.3 - fix CVE-2009-2663 Resolves: 516348 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Not...

CentOS 3 / 4 / 5 : libvorbis (CESA-2009:1561)

Updated libvorbis packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The libvorbis packages contain runtime libraries for use in programs that...

TagScanner 5.1 - Stack Buffer Overflow (PoC)

Title: ====== TagScanner v5.1 - Stack Buffer Overflow Vulnerability Date: ===== 2013-01-22 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=831 VL-ID: ===== 831 Introduction: ============= TagScanner is a multifunction program for organizing and managing your music...

SuSE 11.1 Security Update : taglib (SAT Patch Number 6179)

The following issue has been fixed : - specially crafted ogg files could have crashed taglib %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if...

Fedora Update for icecast FEDORA-2012-16147

Check for the Version of icecast OpenVAS Vulnerability Test Fedora Update for icecast FEDORA-2012-16147 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 17 Update: icecast-2.3.3-1.fc17

Icecast is a streaming media server which currently supports Ogg Vorbis and MP3 audio streams. It can be used to create an Internet radio station or a privately running jukebox and many things in between. It is very versatile in that new formats can be added relatively easily and supports open...