804 matches found
DivX Player skin files directory traversal
During installation of DivX skin file it's possible ot overwrite any files in any location...
RealPlayer Miscellaneous Vulnerabilities (#NISR19012005g)
NGSSoftware Insight Security Research Advisory Name: RealPlayer Miscellaneous Vulnerabilities Systems Affected: RealPlayer 10.5 6.0.12.1040 and older Severity: Low/Medium Vendor URL: http://www.real.com/ Author: John Heasman [email protected] Date of Public Advisory: 19th January 2004 Advisory...
Winamp < 5.0.5 Skin File (.WSZ) Local Zone Arbitrary Code Execution
The remote host is using Winamp, a popular media player which handles many files format mp3, wavs and more... The remote version of this software is vulnerable to a code execution flaw when processing a malformed .WSZ Winamp Skin file. An attacker may exploit this flaw by sending a malformed .wsz...
GetRight <= 5.2a Skin File (*.grs) Buffer Overflow Exploit
No description provided by source. GetRight Skin File .grs Buffer Overflow May Let Remote Users Run Arbitrary Code Application: GetRight Headlight Software www.getright.com Author: ATmaCA [email protected] a remote user can create a malicious skin file .grs that, when loaded by the target user,...
GetRight <= 5.2a Skin File (*.grs) Buffer Overflow Exploit
Exploit for unknown platform in category dos / poc ========================================================== GetRight = 5.2a Skin File .grs Buffer Overflow Exploit ========================================================== GetRight Skin File .grs Buffer Overflow May Let Remote Users Run Arbitrar...
GetRight 5.2a - '.grs' Skin File Buffer Overflow
GetRight Skin File .grs Buffer Overflow May Let Remote Users Run Arbitrary Code Application: GetRight Headlight Software www.getright.com Author: ATmaCA a remote user can create a malicious skin file .grs that, when loaded by the target user, will trigger a buffer overflow in DUNZIP32.DLL 4.0.0.3...
GetRight 5.2a - .grs Skin File Buffer Overflow
GetRight 5.2a - .grs Skin File Buffer Overflow GetRight Skin File .grs Buffer Overflow May Let Remote Users Run Arbitrary Code Application: GetRight Headlight Software www.getright.com Author: ATmaCA a remote user can create a malicious skin file .grs that, when loaded by the target user, will...
RealPlayer Skin File Handling Buffer Overflow
Binary data 2381.prm...
EEYE: RealPlayer Zipped Skin File Buffer Overflow
RealPlayer Zipped Skin File Buffer Overflow Release Date: October 27, 2004 Date Reported: October 11, 2004 Severity: High Code Execution Vendor: RealNetworks Systems Affected: For Microsoft Windows RealPlayer 10.5 6.0.12.1053 and earlier RealPlayer 10 RealOne Player v2 RealOne Player v1 Overview:...
Pinnacle ShowCenter SettingsBase.php Skin Parameter XSS
The remote host runs the Pinnacle ShowCenter web-based interface. The remote version of this software is vulnerable to cross-site scripting attack due to a lack of sanity checks on skin parameter in the SettingsBase.php script. With a specially crafted URL, an attacker can cause arbitrary code...
Pinnacle ShowCenter DoS
Web interface DoS with non-existant skin...
CVE-2004-1699
SettingsBase.php in Pinnacle ShowCenter 1.51 allows remote attackers to cause a denial of service web interface errors via an invalid Skin parameter...
Pinnacle ShowCenter 1.51 - Web Interface Skin Denial of Service
source: https://www.securityfocus.com/bid/11232/info The Pinnacle Systems ShowCenter web-based interface is reported prone to a remote denial of service vulnerability. The issue exists due to a lack of sanity checks performed on the Skin parameter of a ShowCenter script. It is reported that the...
CVE-2004-0820
Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file...
CVE-2004-0820
Versions of Winamp prior to 5.0.4 are vulnerable to a buffer overflow and code execution flaw when processing malformed .WSZ skin files . An attacker can exploit this by tricking a victim into loading a malicious .wsz file, which can then execute arbitrary scripts or files (such as file.exe ) wit...
EUVD-2002-1507
Buffer overflow in XML parser in wsabi.dll of Winamp 3 1.0.0.488 allows remote attackers to execute arbitrary code via a skin file .wal with a long include file tag...
CVE-2002-1524
Buffer overflow in XML parser in wsabi.dll of Winamp 3 1.0.0.488 allows remote attackers to execute arbitrary code via a skin file .wal with a long include file tag...
CVE-2004-0820
Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file...
winampExploit.txt
index.html ----------- Load.php --------- foo.wsz foo.zip ----------------- /frame/ /maki/ /shade/ /html/ /html/file.exe malicious file to execute /html/test.htm html to load the .exe /player/ /player/Thumbs.db /xml/ /xml/includes.xml /xml/player-normal.xml /xml/player.xml /skin.xml /html/test.ht...
VulnCheck KEV: CVE-2004-0820
Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file...