Switch Sound File Converter - '.mpga' Buffer Overflow (Denial of Service) (PoC)

Exploit Title: Switch Sound File Converter .mpga BOF DOS Date: 2009-1-1 Author: Jacky Version: 0.0.0.0 Tested on: Windows XP SP2 Switch Sound File Converter .mpga BOF POS Vulnerability Discovered and written by : Jacky Greetz to Corelan team and Peter Van Eeckhoutte !!! When you create a file tha...

SoftCab Sound Converter Active-X Insecure Method

Exploited By : ThE g0bL!N function Doit File = "Dz.exe" dz.SaveFormatFile SoftCab Sound Converter ActiveX sndConverter.ocx Insecure Method Exploit...

CVE-2009-4453

Insecure method vulnerability in SoftCab Sound Converter ActiveX control sndConverter.ocx 1.2 allows remote attackers to create or overwrite arbitrary files via the SaveFormat method. NOTE: some of these details are obtained from third party information...

Design/Logic Flaw

Insecure method vulnerability in SoftCab Sound Converter ActiveX control sndConverter.ocx 1.2 allows remote attackers to create or overwrite arbitrary files via the SaveFormat method. NOTE: some of these details are obtained from third party information...

CVE-2009-4453

Insecure method vulnerability in SoftCab Sound Converter ActiveX control sndConverter.ocx 1.2 allows remote attackers to create or overwrite arbitrary files via the SaveFormat method. NOTE: some of these details are obtained from third party information...

CVE-2009-4453

The CVE-2009-4453 issue affects SoftCab Sound Converter ActiveX control (sndConverter.ocx) version 1.2. The vulnerability stems from an insecure SaveFormat method that enables remote attackers to create or overwrite arbitrary files. This is documented across CVE/NVD entries as an insecure method ...

SoftCab Sound Converter ActiveX Insecure Method Exploit (sndConverter.ocx)

No description provided by source. !-- Author: ThE g0bL!N Software Link: http://www.softcab.com/ftp/converteractivex.zip Version: Tested on: Xp sp2 -- titleExploited By : ThE g0bL!N /title BODY object id=dz classid="clsid:66757BFC-DA0C-41E6-B3FE-B6D461223FF5"/object SCRIPT function Doit File =...

SoftCab Sound Converter - sndConverter.ocx ActiveX Insecure Method

SoftCab Sound Converter - sndConverter.ocx ActiveX Insecure Method Exploited By : ThE g0bL!N function Doit File = "Dz.exe" dz.SaveFormatFile SoftCab Sound Converter ActiveX sndConverter.ocx Insecure Method Exploit...

SoftCab Sound Converter ActiveX Insecure Method Exploit

Exploit for unknown platform in category web applications ========================================================================== SoftCab Sound Converter ActiveX Insecure Method Exploit sndConverter.ocx ========================================================================== Exploited By : T...

SoftCab Sound Converter - 'sndConverter.ocx' ActiveX Insecure Method

Exploited By : ThE g0bL!N function Doit File = "Dz.exe" dz.SaveFormatFile SoftCab Sound Converter ActiveX sndConverter.ocx Insecure Method Exploit...

java-1.6.0-sun: Stack-based buffer overflow via a long file: URL argument (6854303)

Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.127, and SDK and JRE 1.4.x before 1.4.224 allows remote attackers to execute arbitrary code via a long file: URL in a...

[SECURITY] Fedora 11 Update: libsndfile-1.0.20-3.fc11

libsndfile is a C library for reading and writing sound files such as AIFF, AU, WAV, and others through one standard interface. It can currently read/write 8, 16, 24 and 32-bit PCM files as well as 32 and 64-bit floating point WAV files and a number of compressed formats. It compiles and runs on...

[SECURITY] Fedora 10 Update: libsndfile-1.0.20-3.fc10

libsndfile is a C library for reading and writing sound files such as AIFF, AU, WAV, and others through one standard interface. It can currently read/write 8, 16, 24 and 32-bit PCM files as well as 32 and 64-bit floating point WAV files and a number of compressed formats. It compiles and runs on...

java-1.6.0-sun: Stack-based buffer overflow via a long file: URL argument (6854303)

Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.127, and SDK and JRE 1.4.x before 1.4.224 allows remote attackers to execute arbitrary code via a long file: URL in a...

CVE-2009-3670

Stack-based buffer overflow in KSP Sound Player 2009 R2 and R2.1 allows remote attackers to execute arbitrary code via a long string in a .m3u playlist file...

Stack overflow

Stack-based buffer overflow in KSP Sound Player 2009 R2 and R2.1 allows remote attackers to execute arbitrary code via a long string in a .m3u playlist file...

CVE-2009-3670

Stack-based buffer overflow in KSP Sound Player 2009 R2 and R2.1 allows remote attackers to execute arbitrary code via a long string in a .m3u playlist file...

CVE-2009-3670

CVE-2009-3670 affects KSP Sound Player 2009 R2 and R2.1. It is a stack-based buffer overflow triggered by a long string in an .m3u playlist, allowing a remote attacker to execute arbitrary code. The vulnerability appears in the way the playlist string is handled (no details on mitigations or patc...

Null pointer dereference

CreativeLabs es1371mp.sys 5.1.3612.0 WDM audio driver, as used in Ensoniq PCI 1371 sound cards and when running on Windows Vista, does not create a Functional Device Object FDO to prevent user-moade access to the Physical Device Object PDO, which allows local users to gain SYSTEM privileges via a...

CVE-2008-7211

CreativeLabs es1371mp.sys 5.1.3612.0 WDM audio driver, as used in Ensoniq PCI 1371 sound cards and when running on Windows Vista, does not create a Functional Device Object FDO to prevent user-moade access to the Physical Device Object PDO, which allows local users to gain SYSTEM privileges via a...