XMPlay Playlist文件缓冲区溢出漏洞

XMPlay是一款媒体播放程序。 XMPlay不正确处理播放文件数据，远程攻击者可以利用漏洞进行缓冲区溢出攻击，可能以进程权限执行任意指令。 问题是在处理播放文件中的M3U中的DisplayName字段或FileName字段时缺少正确的边界条件检查，可造成以应用程序权限执行任意指令。 XMPlayer XMPlayer 3.3 4 http://www.un4seen.com/xmplay.html 0-day XMPlay 3.3.0.4 .PLS Filename Buffer Overflow Exploit /...

Quintessential Player <= 4.50.1.82 (Playlist) Denial of Service PoC

No description provided by source. / 0-day Quintessential Player = 4.50.1.82 Playlist Denial Of Service PoC ======================================================================== ======================================================================== Quintessential Player 4.50.1.82 and lower...

Quintessential Player 4.50.1.82 - Playlist Denial of Service (PoC)

Quintessential Player 4.50.1.82 - Playlist Denial of Service PoC / 0-day Quintessential Player = 4.50.1.82 Playlist Denial Of Service PoC ======================================================================== ======================================================================== Quintessentia...

XMPlay <= 3.3.0.4 (PLS) Local/Remote Buffer Overflow Exploit

No description provided by source. / =================================================================== 0-day XMPlay 3.3.0.4 .PLS Filename Buffer Overflow Exploit =================================================================== XMPlay 3.3.0.4 and lower experiance a stack-based buffer overflow...

xmplay-3.txt

/ =================================================================== 0-day XMPlay 3.3.0.4 .PLS Filename Buffer Overflow Exploit =================================================================== XMPlay 3.3.0.4 and lower experiance a stack-based buffer overflow when loading malformed M3U and PLS...

XMPlay 3.3.0.4 (M3U Filename) Local Buffer Overflow Exploit

No description provided by source. / =================================================================== 0-day XMPlay 3.3.0.4 .M3U Filename Buffer Overflow Exploit =================================================================== XMPlay 3.3.0.4 and lower experiance a stack-based buffer overflow...

XMPlay 3.3.0.4 - '.PLS' Local Buffer Overflow

/ =================================================================== 0-day XMPlay 3.3.0.4 .PLS Filename Buffer Overflow Exploit =================================================================== XMPlay 3.3.0.4 and lower experiance a stack-based buffer overflow when loading malformed M3U and PLS...

XMPlay 3.3.0.4 - .PLS Local Buffer Overflow

XMPlay 3.3.0.4 - .PLS Local Buffer Overflow / =================================================================== 0-day XMPlay 3.3.0.4 .PLS Filename Buffer Overflow Exploit =================================================================== XMPlay 3.3.0.4 and lower experiance a stack-based buffer...

XMPlay 3.3.0.4 (PLS) Local/Remote Buffer Overflow Exploit

No description provided by source. / =================================================================== 0-day XMPlay 3.3.0.4 .PLS Filename Buffer Overflow Exploit =================================================================== XMPlay 3.3.0.4 and lower experiance a stack-based buffer overflow...

XMPlay 3.3.0.4 (PLS) Local/Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ========================================================= XMPlay 3.3.0.4 PLS Local/Remote Buffer Overflow Exploit ========================================================= / ==================================================================...

XMPlay 3.3.0.4 - .M3U Filename Local Buffer Overflow

XMPlay 3.3.0.4 - .M3U Filename Local Buffer Overflow / =================================================================== 0-day XMPlay 3.3.0.4 .M3U Filename Buffer Overflow Exploit =================================================================== XMPlay 3.3.0.4 and lower experiance a stack-bas...

XMPlay 3.3.0.4 - '.M3U' Filename Local Buffer Overflow

/ =================================================================== 0-day XMPlay 3.3.0.4 .M3U Filename Buffer Overflow Exploit =================================================================== XMPlay 3.3.0.4 and lower experiance a stack-based buffer overflow when loading malformed M3U files...

CVE-2006-5906

The CVE-2006-5906 issue affects Jean-Christophe Ramos SCRIPT BANNIERES (aka ban 0.1, PLS-Bannieres 1.21) and concerns a remote file inclusion in modules/bannieres/bannieres.php. The vulnerability arises from the chemin parameter, which could be used to supply a URL that leads to arbitrary PHP cod...

PLS-Bannieres 1.21 (bannieres.php) File Include

PLS-Bannieres 1.21 bannieres.php File Include Source Code: ftp://ftp1.comscripts.com/PHP/1959ban01-01.zip Vulnerable Code: modules/bannieres/bannieres.php In Line 13 : include "$chemin/includes/connexion.php" ; Exploit :...

PLS-Bannieres1.21.txt

PLS-Bannieres 1.21 bannieres.php File Include Source Code: ftp://ftp1.comscripts.com/PHP/1959ban01-01.zip Vulnerable Code: modules/bannieres/bannieres.php In Line 13 : include "$chemin/includes/connexion.php" ; Exploit :...

WinAmp player buffer overflow

Buffer overflow on oversized computer name in UNC path of .pls on .m3u file entry. Buffer overflow on oversized WMA playlist file entry. Vulnerability can be exploited for hidden trojan installation...

CVE-2006-0708

Multiple buffer overflows in NullSoft Winamp 5.13 and earlier allow remote attackers to execute arbitrary code via 1 an m3u file containing a long URL ending in .wma, 2 a pls file containing a File1 field with a long URL ending in .wma, or 3 an m3u file with a long filename, variants of...

CVE-2006-0708: Undefined Security Weakness

Multiple buffer overflows in NullSoft Winamp 5.13 and earlier allow remote attackers to execute arbitrary code via 1 an m3u file containing a long URL ending in .wma, 2 a pls file containing a File1 field with a long URL ending in .wma, or 3 an m3u file with a long filename, variants of...

CVE-2005-3188: Undefined Security Weakness

Buffer overflow in Nullsoft Winamp 5.094 allows remote attackers to execute arbitrary code via 1 an m3u file containing a long line ending in .wma or 2 a pls file containing a long File1 value ending in .wma, a different vulnerability than CVE-2006-0476...

CVE-2006-0476

Winamp 5.13 and earlier variants (notably 5.12) are affected by buffer-overflow flaws triggered by crafted playlist files (M3U/PLS) containing long URLs/filenames, enabling remote code execution. Connected sources document CVE-2006-0476 and related CVEs (e.g., CVE-2006-0708, CVE-2005-3188) descri...