SoftCab Sound Converter - 'sndConverter.ocx' ActiveX Insecure Method

Exploited By : ThE g0bL!N function Doit File = "Dz.exe" dz.SaveFormatFile SoftCab Sound Converter ActiveX sndConverter.ocx Insecure Method Exploit...

java-1.6.0-sun: Stack-based buffer overflow via a long file: URL argument (6854303)

Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.127, and SDK and JRE 1.4.x before 1.4.224 allows remote attackers to execute arbitrary code via a long file: URL in a...

[SECURITY] Fedora 11 Update: libsndfile-1.0.20-3.fc11

libsndfile is a C library for reading and writing sound files such as AIFF, AU, WAV, and others through one standard interface. It can currently read/write 8, 16, 24 and 32-bit PCM files as well as 32 and 64-bit floating point WAV files and a number of compressed formats. It compiles and runs on...

[SECURITY] Fedora 10 Update: libsndfile-1.0.20-3.fc10

libsndfile is a C library for reading and writing sound files such as AIFF, AU, WAV, and others through one standard interface. It can currently read/write 8, 16, 24 and 32-bit PCM files as well as 32 and 64-bit floating point WAV files and a number of compressed formats. It compiles and runs on...

java-1.6.0-sun: Stack-based buffer overflow via a long file: URL argument (6854303)

Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.127, and SDK and JRE 1.4.x before 1.4.224 allows remote attackers to execute arbitrary code via a long file: URL in a...

Stack overflow

Stack-based buffer overflow in KSP Sound Player 2009 R2 and R2.1 allows remote attackers to execute arbitrary code via a long string in a .m3u playlist file...

CVE-2009-3670

Stack-based buffer overflow in KSP Sound Player 2009 R2 and R2.1 allows remote attackers to execute arbitrary code via a long string in a .m3u playlist file...

CVE-2009-3670

Stack-based buffer overflow in KSP Sound Player 2009 R2 and R2.1 allows remote attackers to execute arbitrary code via a long string in a .m3u playlist file...

CVE-2009-3670

CVE-2009-3670 affects KSP Sound Player 2009 R2 and R2.1. It is a stack-based buffer overflow triggered by a long string in an .m3u playlist, allowing a remote attacker to execute arbitrary code. The vulnerability appears in the way the playlist string is handled (no details on mitigations or patc...

CVE-2009-3670: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in KSP Sound Player 2009 R2 and R2.1 allows remote attackers to execute arbitrary code via a long string in a .m3u playlist file...

Null pointer dereference

CreativeLabs es1371mp.sys 5.1.3612.0 WDM audio driver, as used in Ensoniq PCI 1371 sound cards and when running on Windows Vista, does not create a Functional Device Object FDO to prevent user-moade access to the Physical Device Object PDO, which allows local users to gain SYSTEM privileges via a...

CVE-2008-7211

CreativeLabs es1371mp.sys 5.1.3612.0 WDM audio driver, as used in Ensoniq PCI 1371 sound cards and when running on Windows Vista, does not create a Functional Device Object FDO to prevent user-moade access to the Physical Device Object PDO, which allows local users to gain SYSTEM privileges via a...

CVE-2008-7211

The CVE-2008-7211 entry concerns CreativeLabs es1371mp.sys 5.1.3612.0 WDM audio driver used in Ensoniq PCI 1371 sound cards (and on Windows Vista). The root cause is that the driver does not create a Functional Device Object (FDO) to isolate the Physical Device Object (PDO), which allows a local ...

KSP 2009R2 (m3u) Universal Local Buffer Overflow Exploit (SEH)

No description provided by source. !/usr/bin/python Found By :: HACK4LOVE [email protected] KSP 2009R2 m3u Universal Local Buffer Exploit SEH http://ksplayer.boo.pl/index.php --- info:: KSP 2009R2 Sound Player was released 28//8//2009 AND special THANKS FOR His0k4 shellcode=...

KSP 2009R2 - .m3u Universal Local Buffer Overflow (SEH)

KSP 2009R2 - .m3u Universal Local Buffer Overflow SEH !/usr/bin/python Found By :: HACK4LOVE [email protected] KSP 2009R2 m3u Universal Local Buffer Exploit SEH http://ksplayer.boo.pl/index.php --- info:: KSP 2009R2 Sound Player was released 28//8//2009 AND special THANKS FOR His0k4 shellcode...

KSP 2009R2 (m3u) Universal Local Buffer Overflow Exploit (SEH)

Exploit for unknown platform in category local exploits ============================================================== KSP 2009R2 m3u Universal Local Buffer Overflow Exploit SEH ============================================================== !/usr/bin/python Found By :: HACK4LOVE KSP 2009R2 m3u...

KSP 2009R2 Buffer Overflow

!/usr/bin/python Found By :: HACK4LOVE [email protected] KSP 2009R2 m3u Universal Local Buffer Exploit SEH http://ksplayer.boo.pl/index.php --- info:: KSP 2009R2 Sound Player was released 28//8//2009 AND special THANKS FOR His0k4 shellcode=...

Ubuntu 8.04 LTS / 8.10 / 9.04 : libvorbis vulnerability (USN-825-1)

It was discovered that libvorbis did not correctly handle certain malformed ogg files. If a user were tricked into opening a specially crafted ogg file with an application that uses libvorbis, an attacker could execute arbitrary code with the user's privileges. CVE-2009-2663 USN-682-1 provided...

libsndfile: User-assisted execution of arbitrary code

Background libsndfile is a C library for reading and writing files containing sampled sound. Description The following vulnerabilities have been found in libsndfile: Tobias Klein reported that the headerread function in src/common.c uses user input for calculating a buffer size, possibly leading ...

Memory corruption

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to memory corruption, aka "PP7 Memory Corruption Vulnerability," a different vulnerability than...