2664 matches found
Adobe Flash Player fails to properly handle malformed SWF files
Overview Adobe Flash Player fails to properly handle malformed SWF files resulting in a memory corruption vulnerability. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code. Description Adobe Flash Player is a player for the Flash media format and enables...
FreeBSD : Macromedia flash player -- swf file handling arbitrary code (aed343b4-5480-11da-b579-001125afbed7)
A Secunia Advisory reports : A vulnerability has been reported in Macromedia Flash Player, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to missing validation of the frame type identifier that is read from a SWF file. This value is used ...
CVE-2006-1461
Apple QuickTime before 7.1 is affected by multiple buffer overflows that can allow remote code execution via a crafted QuickTime SWF/file, across Windows and Mac OS X. The issues arise from various integer- and buffer-overflow vulnerabilities in QuickTime’s handling of image/media formats; exploi...
CVE-2006-1461
Multiple buffer overflows in Apple QuickTime before 7.1 allow remote attackers to execute arbitrary code via a crafted QuickTime Flash SWF file...
CVE-2006-1461: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple buffer overflows in Apple QuickTime before 7.1 allow remote attackers to execute arbitrary code via a crafted QuickTime Flash SWF file...
CVE-2006-1748: Undefined Security Weakness
Cross-site scripting XSS vulnerability in XMB Forum 1.9.5 allows remote attackers to inject arbitrary web script or HTML by uploading a Flash .SWF video that contains a getURL function call, which causes the video to be rendered without disabling ActionScript...
RealPlayer buffer overflow
Buffer overflow on SWF files parsing, Web pages parsing, MBC files parsing...
realplayer-swf-PoC.pl.txt
!/usr/bin/perl RealPlayer: Buffer overflow vulnerability / PoC CVE-2006-0323 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0323 RealNetworks Advisory http://service.real.com/realplayer/security/03162006player/en/ Federico L. Bossi Bonin fbossiatnetcomm.com.ar Program received signal...
RealNetworks products vulnerable to buffer overflow via specially crafted flash media file
Overview Numerous RealNetworks products are vulnerable to a buffer overflow that may allow a remote attacker to execute arbitrary code on a vulnerable system. Description RealNetworks RealPlayer RealNetworks RealPlayer is a multimedia application that allows users to view local and remote...
RealPlayer <= 10.5 (6.0.12.1040-1348) SWF Buffer Overflow PoC
Exploit for multiple platform in category dos / poc ============================================================= RealPlayer $EGGFILE" or die "ERROR:$EGGFILE\n"; print EGG $header; for $i = 0; $i 135; $i++ $buffer.= "\x90"; print EGG $buffer; print EGG $endheader; closeEGG; 0day.today 2018-03-14...
RealPlayer <= 10.5 (6.0.12.1040-1348) SWF Buffer Overflow PoC
No description provided by source. !/usr/bin/perl RealPlayer: Buffer overflow vulnerability / PoC CVE-2006-0323 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0323 RealNetworks Advisory http://service.real.com/realplayer/security/03162006player/en/ Federico L. Bossi Bonin...
RealPlayer 10.5 (6.0.12.1040-1348) - SWF Buffer Overflow (PoC)
RealPlayer 10.5 6.0.12.1040-1348 - SWF Buffer Overflow PoC !/usr/bin/perl RealPlayer: Buffer overflow vulnerability / PoC CVE-2006-0323 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0323 RealNetworks Advisory http://service.real.com/realplayer/security/03162006player/en/ Federico L. Boss...
RealPlayer 10.5 (6.0.12.1040-1348) - SWF Buffer Overflow (PoC)
!/usr/bin/perl RealPlayer: Buffer overflow vulnerability / PoC CVE-2006-0323 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0323 RealNetworks Advisory http://service.real.com/realplayer/security/03162006player/en/ Federico L. Bossi Bonin fbossiatnetcomm.com.ar Program received signal...
GLSA-200603-24 : RealPlayer: Buffer overflow vulnerability
The remote host is affected by the vulnerability described in GLSA-200603-24 RealPlayer: Buffer overflow vulnerability RealPlayer is vulnerable to a buffer overflow when processing malicious SWF files. Impact : By enticing a user to open a specially crafted SWF file an attacker could execute...
RealPlayer: Buffer overflow vulnerability
Background RealPlayer is a multimedia player capable of handling multiple multimedia file formats. Description RealPlayer is vulnerable to a buffer overflow when processing malicious SWF files. Impact By enticing a user to open a specially crafted SWF file an attacker could execute arbitrary code...
Rhapsody SWF File Handling Buffer Overflow
According to its version number, the installed version of Rhapsody on the remote host suffers from a buffer overflow involving SWF files. To exploit this issue, a remote attacker needs to convince a user to attempt to play a maliciously crafted SWF file using the affected application. C Tenable...
RealPlayer for Windows < Build 6.0.12.1483 Multiple Vulnerabilities
According to its build number, the installed version of RealPlayer / RealOne Player / RealPlayer Enterprise on the remote Windows host suffers from one or more buffer overflows involving maliciously- crafted SWF and MBC files as well as web pages. In addition, it also may be affected by a local...
Buffer overflow
Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, Rhapsody 3, and Helix Player allows remote attackers to execute arbitrary code via a crafted SWF Flash file with 1 a size value that is less than the actual size, or 2 other...
CVE-2006-0323
Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, Rhapsody 3, and Helix Player allows remote attackers to execute arbitrary code via a crafted SWF Flash file with 1 a size value that is less than the actual size, or 2 other...
CVE-2006-0323
RealPlayer/RealOne (including RealPlayer 10.x, RealOne Player, Rhapsody 3, and Helix Player) are affected by CVE-2006-0323 due to a buffer overflow when processing malformed SWF (Flash) files. The underlying issue is an improper validation/parsing of SWF content, allowing a remote attacker to exe...