GOM Encoder .srt文件解析堆溢出漏洞

BUGTRAQ ID: 34120 GOM Encoder是一款功能强大的视频转换工具。 GOM Encoder在转换内嵌有字幕的视频时没有正确地处理srt格式的字幕文件。当程序处理Preview/Set Segment功能时，如果srt文件包含有超长的文本字段，就会触发堆溢出，导致拒绝服务或执行任意指令。 0 Gretech GOM Encoder Demo = 1.0.0.11 Gretech ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： a href=http://www.gomplayer.com...

[Bkis-04-2009] GOM Encoder Heap-based Buffer Overflow

GOM Encoder Heap-based Buffer Overflow 1. General Information GOM Encoder is a video transcoder that can work with a lot of video formats. One of its functions is embedding subtitles to the video, which means you can see subtitles on the resulting video even if your device doesn't support subtitl...

divx-Exploit.cpp.txt

// Exploit.cpp : Defines the entry point for the console application. // include "stdafx.h" / DivX Player =6.7 srt subtitle parsing exploit Coded by [email protected] Tested on Windows XP SP2 + DivX Player 6.7.0 Credit to securfrog for his PoC Actually this exploit is not relevant to DivX 6.6....

DivX Player 6.7 SRT File Subtitle Parsing Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ================================================================= DivX Player 6.7 SRT File Subtitle Parsing Buffer Overflow Exploit ================================================================= // Exploit.cpp : Defines the entry point fo...

CVE-2008-1912

Stack-based buffer overflow in DivX Player 6.7 build 6.7.0.22 and earlier allows user-assisted remote attackers to cause a denial of service application crash or execute arbitrary code via a long subtitle in a .SRT file...

DivX Player 6.6.0 SRT File SEH Buffer Overflow Exploit

No description provided by source. !/usr/bin/python DivX 6.6 SRT SEH overwrite PoC Tested on XP SP2 Coded by Mati Aharoni, aka muts and Chris Hadnagy, aka loganWHD muts..at..offensive-security...dot..com chris..at..offensive-security...dot..com http://www.offensive-security.com/0day/divx66.py.txt...

DivX Player 6.6.0 SRT File SEH Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ====================================================== DivX Player 6.6.0 SRT File SEH Buffer Overflow Exploit ====================================================== !/usr/bin/python DivX 6.6 SRT SEH overwrite PoC Tested on XP SP2 Coded by Ma...

DivX Player <= 6.7.0 SRT File Buffer Overflow PoC

No description provided by source. DIVX Player = 6.7.0 Buffer Overflow PoC .SRT Bug: When parsing a subtitle file with an overly long subtitle DIVX player will deadly crash with eip overwritted: Replace MOVIEFILENAME by your movie filename .avi ...

DivX Player .SRT文件字幕解析缓冲区溢出漏洞

BUGTRAQ ID: 28799 DivX Player是一款Windows下的DivX文件播放器。 DivX播放器在解析带有超长字幕的字幕文件（.SRT）时存在缓冲区溢出，如果用户受骗加载了恶意字幕的话就会触发这个溢出，导致播放器崩溃。 DivX DivX Player = 6.7.0 DivX ---- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.divx.com/ DIVX Player = 6.7.0 Buffer Overflow PoC .SRT Bug: When parsing a subtitl...

BS.Player 2.27 Build 959 - .srt File Buffer Overflow (PoC)

BS.Player 2.27 Build 959 - .srt File Buffer Overflow PoC !/usr/bin/python BS.player 2.27 Build 959 SRT Buffer Overflow Just rename movie.srt file with the name of the movie you like... Vulnerability discovered by Muris Kurgas a.k.a j0rgan jorganwd at gmail dot com http://www.jorgan.users.cg.yu...

DIVX Player <= 6.7.0 Buffer Overflow PoC ( .SRT )

DIVX Player = 6.7.0 Buffer Overflow PoC .SRT Bug: When parsing a subtitle file with an overly long subtitle DIVX player will deadly crash with eip overwritted Replace MOVIEFILENAME by your movie filename .avi !/usr/local/bin/perl my $file="MOVIEFILENAME.srt"; my $payload = "A" x 4096; open $file,...

BS.Player 2.27 Build 959 SRT File Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ===================================================== BS.Player 2.27 Build 959 SRT File Buffer Overflow PoC ===================================================== !/usr/bin/python BS.player 2.27 Build 959 SRT Buffer Overflow Just rename movie.srt...

DivX Player 6.7.0 - .srt File Buffer Overflow (PoC)

DivX Player 6.7.0 - .srt File Buffer Overflow PoC DIVX Player $file" or die "Cannot open $file: $!"; print $file "1 \n"; print $file "00:00:01,001 -- 00:00:02,001\n"; print $file $payload; close$file; print "$file has been created \n"; milw0rm.com 2008-04-15...

DivX Player <= 6.7.0 SRT File Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ================================================= DivX Player $file" or die "Cannot open $file: $!"; print $file "1 \n"; print $file "00:00:01,001 -- 00:00:02,001\n"; print $file $payload; close$file; print "$file has been created \n"; 0day.today...

DivX Player 6.7.0 - '.srt' File Buffer Overflow (PoC)

DIVX Player $file" or die "Cannot open $file: $!"; print $file "1 \n"; print $file "00:00:01,001 -- 00:00:02,001\n"; print $file $payload; close$file; print "$file has been created \n"; milw0rm.com 2008-04-15...

CVE-2006-0867

CVE-2006-0867 affects South River (SRT) WebDrive, with vulnerable versions potentially including 6.08 build 1131 and version 8. The issue is a buffer overflow in the name entry field that can be triggered by a long string, leading to application crash and persistent erratic behavior (denial of se...