CVE-2002-1014

Buffer overflow in RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary code via an RFS skin file whose skin.ini contains a long value in a CONTROLnImage argument, such as CONTROL1Image...

CVE-2002-2392

Winamp 2.65 through 3.0 stores skin files in a predictable file location, which allows remote attackers to execute arbitrary code via a URL reference to 1 wsz and 2 wal files that contain embedded code...

Buffer overflow in Trillian

Buffer overflow on skin file parsing...

Trillian XML parser buffer overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Problem: It is possible to create a skin for trillian that will trigger a buffer overflow. In trillian.xml under the prefs section. control name="colors" type="colors" colors file="4096 characters" Still no word from Cerulean Studios on when a fix wil...

WINAMP also allows execution of arbitrary code (probably a lot more programs aswell)

It would seem that I opened up a can of worms when i created my icq + msie advisory the other day Wich presented a new way to execute arbitrary code on a users machine winamp is equally vulnerable Winamps starts skin files with the extention wsz and the mime type interface/x-winamp-skin automatic...

Real Networks RealONE Player vulnerable to arbitrary command execution via crafted html in the skin file

Overview RealNetwork's RealJukebox and RealONE Gold players are media applications that permit users to stream audio and video from local and internet sources. A vulnerability exists in the applications that could permit the execution of arbitrary commands by a remote attacker. Description...

Real Networks RealJukebox2 vulnerable to arbitrary code execution via crafted skin file

Overview RealNetwork's RealJukebox and RealONE Gold players are media applications that permit users to stream audio and video from local and internet sources. A vulnerability exists in the applications that could permit the execution of arbitrary code by a remote attacker. Description RealJukebo...

[SPSadvisory#48]RealONE Player Gold / RealJukebox2 Buffer Overflow

SPS Advisory 48 RealONE Player Gold / RealJukebox2 Buffer Overflow UNYUN [email protected] Shadow Penguin Security http://www.shadowpenguin.org -------------------------------------------------------------- Date July. 12, 2002 vulnerable RealONE Player Gold Ver. 6.0.10.505 RealJukebox2 Ver...

[SPSadvisory#47]RealONE Player Gold / RealJukebox2 skin file download vulnerability

SPS Advisory 47 RealONE Player Gold / RealJukebox2 skin file download vulnerability UNYUN [email protected] Shadow Penguin Security http://www.shadowpenguin.org -------------------------------------------------------------- Date July. 12, 2002 vulnerable RealONE Player Gold Ver. 6.0.10.505...

RealONE Player Gold / RealJukebox2 multiple bugs

Buffer overflow and local zone scripting during skin file processing...

CVE-2001-0137

Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclosing the applet in a skin file named skin.wmz, then referencing that skin in the codebase parameter to an applet tag, aka the Windows Media Player Skins File Download" vulnerabili...

CVE-2001-0137

CVE-2001-0137 affects Windows Media Player 7. The vulnerability lets remote attackers cause the execution of malicious Java applets in Internet Explorer by embedding the applet in a skin.wmz skin file and referencing it via the skin in the codebase parameter of an applet tag (Windows Media Player...

CVE-2001-0137

Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclosing the applet in a skin file named skin.wmz, then referencing that skin in the codebase parameter to an applet tag, aka the Windows Media Player Skins File Download" vulnerabili...

CVE-2000-1112

Microsoft Windows Media Player 7 executes scripts in custom skin .WMS files, which could allow remote attackers to gain privileges via a skin that contains a malicious script, aka the ".WMS Script Execution" vulnerability...

Microsoft Windows Media Player 7.0 - .wmz Arbitrary Java Applet

Microsoft Windows Media Player 7.0 - .wmz Arbitrary Java Applet source: https://www.securityfocus.com/bid/2203/info A vulnerability has been reported in Microsoft Windows Media Player 7 which is exploitable through Internet Explorer and Java. Skins are downloadable files which change the appearan...

CVE-2000-1112

Microsoft Windows Media Player 7 executes scripts in custom skin .WMS files, which could allow remote attackers to gain privileges via a skin that contains a malicious script, aka the ".WMS Script Execution" vulnerability...