3709 matches found
CVE-2009-3670
Stack-based buffer overflow in KSP Sound Player 2009 R2 and R2.1 allows remote attackers to execute arbitrary code via a long string in a .m3u playlist file...
CVE-2009-3670
CVE-2009-3670 affects KSP Sound Player 2009 R2 and R2.1. It is a stack-based buffer overflow triggered by a long string in an .m3u playlist, allowing a remote attacker to execute arbitrary code. The vulnerability appears in the way the playlist string is handled (no details on mitigations or patc...
CVE-2009-3670
Stack-based buffer overflow in KSP Sound Player 2009 R2 and R2.1 allows remote attackers to execute arbitrary code via a long string in a .m3u playlist file...
Null pointer dereference
CreativeLabs es1371mp.sys 5.1.3612.0 WDM audio driver, as used in Ensoniq PCI 1371 sound cards and when running on Windows Vista, does not create a Functional Device Object FDO to prevent user-moade access to the Physical Device Object PDO, which allows local users to gain SYSTEM privileges via a...
CVE-2008-7211
The CVE-2008-7211 entry concerns CreativeLabs es1371mp.sys 5.1.3612.0 WDM audio driver used in Ensoniq PCI 1371 sound cards (and on Windows Vista). The root cause is that the driver does not create a Functional Device Object (FDO) to isolate the Physical Device Object (PDO), which allows a local ...
CVE-2008-7211
CreativeLabs es1371mp.sys 5.1.3612.0 WDM audio driver, as used in Ensoniq PCI 1371 sound cards and when running on Windows Vista, does not create a Functional Device Object FDO to prevent user-moade access to the Physical Device Object PDO, which allows local users to gain SYSTEM privileges via a...
KSP 2009R2 (m3u) Universal Local Buffer Overflow Exploit (SEH)
No description provided by source. !/usr/bin/python Found By :: HACK4LOVE [email protected] KSP 2009R2 m3u Universal Local Buffer Exploit SEH http://ksplayer.boo.pl/index.php --- info:: KSP 2009R2 Sound Player was released 28//8//2009 AND special THANKS FOR His0k4 shellcode=...
KSP 2009R2 (m3u) Universal Local Buffer Overflow Exploit (SEH)
Exploit for unknown platform in category local exploits ============================================================== KSP 2009R2 m3u Universal Local Buffer Overflow Exploit SEH ============================================================== !/usr/bin/python Found By :: HACK4LOVE KSP 2009R2 m3u...
KSP 2009R2 Buffer Overflow
!/usr/bin/python Found By :: HACK4LOVE [email protected] KSP 2009R2 m3u Universal Local Buffer Exploit SEH http://ksplayer.boo.pl/index.php --- info:: KSP 2009R2 Sound Player was released 28//8//2009 AND special THANKS FOR His0k4 shellcode=...
KSP 2009R2 - .m3u Universal Local Buffer Overflow (SEH)
KSP 2009R2 - .m3u Universal Local Buffer Overflow SEH !/usr/bin/python Found By :: HACK4LOVE [email protected] KSP 2009R2 m3u Universal Local Buffer Exploit SEH http://ksplayer.boo.pl/index.php --- info:: KSP 2009R2 Sound Player was released 28//8//2009 AND special THANKS FOR His0k4 shellcode...
Ubuntu 8.04 LTS / 8.10 / 9.04 : libvorbis vulnerability (USN-825-1)
It was discovered that libvorbis did not correctly handle certain malformed ogg files. If a user were tricked into opening a specially crafted ogg file with an application that uses libvorbis, an attacker could execute arbitrary code with the user's privileges. CVE-2009-2663 USN-682-1 provided...
libsndfile: User-assisted execution of arbitrary code
Background libsndfile is a C library for reading and writing files containing sampled sound. Description The following vulnerabilities have been found in libsndfile: Tobias Klein reported that the headerread function in src/common.c uses user input for calculating a buffer size, possibly leading ...
CVE-2009-0222
Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to a "pointer overwrite" and memory corruption, aka "Legacy File Format Vulnerability," a differen...
Stack overflow
Multiple stack-based buffer overflows in the PowerPoint 95 importer PP7X32.DLL in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via an inconsistent record length in sound data in a file that uses a PowerPoint 95 PPT95 native file...
CVE-2009-0226
Stack-based buffer overflow in the PowerPoint 4.2 conversion filter in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a long string in sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory...
Memory corruption
Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to improper "array indexing" and memory corruption, aka "PP7 Memory Corruption Vulnerability."...
CVE-2009-0227
Stack-based buffer overflow in the PowerPoint 4.2 conversion filter PP4X32.DLL in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a large number of structures in sound data in a file that uses a PowerPoint 4.0 native file format,...
CVE-2009-1129
Multiple stack-based buffer overflows in the PowerPoint 95 importer PP7X32.DLL in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via an inconsistent record length in sound data in a file that uses a PowerPoint 95 PPT95 native file...
CVE-2009-1137
Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than...
CVE-2009-0226
Stack-based buffer overflow in the PowerPoint 4.2 conversion filter in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a long string in sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory...