CVE-2009-3429

Stack-based buffer overflow in Pirate Radio Destiny Media Player 1.61 allows remote attackers to execute arbitrary code via a long string in a .pls playlist file...

CVE-2009-3429

The CVE-2009-3429 entry describes a stack-based buffer overflow in Destiny Media Player 1.61 (Pirate Radio Destiny Media Player) that can be triggered by a long string in a .pls playlist file, enabling remote code execution. Connected documents confirm practical exploit paths: a Metasploit module...

CVE-2009-3429: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Pirate Radio Destiny Media Player 1.61 allows remote attackers to execute arbitrary code via a long string in a .pls playlist file...

CVE-2009-2817: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Apple iTunes before 9.0.1 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted .pls file...

iTunes < 9.0.1 PLS File Buffer Overflow (Mac OS X)

The remote version of iTunes is older than 9.0.1. Such versions are affected by a buffer overflow involving the handling of PLS files. If an attacker can trick a user on the affected host into opening a malicious PLS file, he can leverage this issue to crash the affected application or to execute...

Apple iTunes < 9.0.1 PLS File Buffer Overflow (credentialed check)

The remote version of Apple iTunes is older than 9.0.1. Such versions are affected by a buffer overflow involving the handling of PLS files. If an attacker can trick a user on the affected host into opening a malicious PLS file, he can leverage this issue to crash the affected application or to...

Apple iTunes 9.0 - '.pls' Buffer Overflow

source: https://www.securityfocus.com/bid/36478/info Apple iTunes is prone to a buffer-overflow vulnerability because the software fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker can exploit this issue to execute arbitrary code within th...

DJ Studio Pro 4.2 (.PLS file) Local Crash Exploit

Exploit for unknown platform in category dos / poc ================================================= DJ Studio Pro 4.2 .PLS file Local Crash Exploit ================================================= !/usr/bin/perl -w DJ Studio Pro 4.2 .PLS file Crash Vulnerability Exploit Founded and exploited by...

DJ Studio Pro 4.2 - '.pls' Local Crash

!/usr/bin/perl -w DJ Studio Pro 4.2 .PLS file Crash Vulnerability Exploit Founded and exploited by prodigy Contact: [email protected] Vendor: http://www.e-soft.co.uk/ Usage to reproduce the bug: when you created the malicious file, load the file and boooom! Platform: Windows ==PoC== use...

DJ Studio Pro 4.2 - .pls Local Crash

DJ Studio Pro 4.2 - .pls Local Crash !/usr/bin/perl -w DJ Studio Pro 4.2 .PLS file Crash Vulnerability Exploit Founded and exploited by prodigy Contact: [email protected] Vendor: http://www.e-soft.co.uk/ Usage to reproduce the bug: when you created the malicious file, load the file and...

DJ Studio Pro 4.2 (.PLS file) Local Crash Exploit

No description provided by source. !/usr/bin/perl -w DJ Studio Pro 4.2 .PLS file Crash Vulnerability Exploit Founded and exploited by prodigy Contact: [email protected] Vendor: http://www.e-soft.co.uk/ Usage to reproduce the bug: when you created the malicious file, load the file and...

Tuniac 090517c - .pls Local Crash (PoC)

Tuniac 090517c - .pls Local Crash PoC !/usr/bin/env python Tuniac v.090517c .PLS Crash PoC By : zAx http://sourceforge.net/projects/tuniac/files/tuniac/090517/TuniacSetup090517c.exe/download buffer = "playlist\x0ANumberOfEntries=1\x0AFile1=http://" + "\x41" 10000; f = open'CrashPoc.PLS','w';...

Stack overflow

Stack-based buffer overflow in AIMP2 Audio Converter 2.53 build 330 and earlier allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a long File1 argument in a 1 .pls or 2 .m3u playlist file...

CVE-2009-3170: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in AIMP2 Audio Converter 2.53 build 330 and earlier allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a long File1 argument in a 1 .pls or 2 .m3u playlist file...

Millenium MP3 Studio (pls/mpf/m3u) Local Universal BOF Exploits (SEH)

Exploit for unknown platform in category local exploits ===================================================================== Millenium MP3 Studio pls/mpf/m3u Local Universal BOF Exploits SEH ===================================================================== !/usr/bin/perl by hack4love Milleni...

CVE-2008-7185

GNOME Rhythmbox 0.11.5 allows remote attackers to cause a denial of service segmentation fault and crash via a playlist .pls file with a long Title field, possibly related to the ghashtablelookup function in b-playlist-manager.c...

WM Downloader Local Buffer Overflow

!/usr/bin/perl + Bug : WM Downloader .Smi/ .Ram/ .pls/ .smil/ .wax/ .wpl File Local Buffer Overflow Exploit + Author : theEdit0r Contact me : the3dit0ratYahoodotcoM + Greetz to all my friends + Tested on: Windows XP Pro SP3 + Big thnx: Expl0iters.ir Anti-security.ir EAX 00000001 ECX 41414141 EDX...

CVE-2009-2934: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in xaudio.dll in Programmed Integration PIPL 2.5.0 and 2.5.0D allow remote attackers to execute arbitrary code via a long string in a 1 .pls or 2 .pl playlist file...

Destiny Media Player 1.61 (.pls) Universal Buffer Overflow Exploit (SEH)

No description provided by source. !/usr/bin/perl + Bug : Destiny Media Player 1.61 .pls Universal Buffer overflow SEH + Author : ThE g0bL!N + Greetz : ma 3labaliche :D + Use : open the pls file directly : + Note: His0k4 Merci jamais Raditni win32exec - EXITFUNC=seh CMD=calc Size=160...

Millenium MP3 Studio 2.0 (PLS File) Stack Buffer Overflow

This module exploits a stack-based buffer overflow in Millenium MP3 Studio 2.0. An attacker must send the file to victim and the victim must open the file. Alternatively it may be possible to execute code remotely via an embedded PLS file within a browser, when the PLS extension is registered to...