QuickTime Streaming Server parse_xml.cgi Remote Execution

The QuickTime Streaming Server contains a CGI script that is vulnerable to metacharacter injection, allow arbitrary commands to be executed as root. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModu...

AWStats Detection

This host is running AWStats, a free powerful and featureful tool that generates advanced web, streaming, ftp or mail server statistics, graphically. OpenVAS Vulnerability Test $Id: awstatsdetect.nasl 5720 2017-03-24 14:15:57Z cfi $ AWStats Detection Authors: Michael Meyer Copyright: Copyright c...

SqueezeCenter Discovery Service Detection

The remote service implements the UDP discovery protocol used by Squeezebox Server formerly known as SlimServer and SqueezeCenter to discover other streaming audio servers in the network. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid42932; scriptversion"1.6";...

Squeezebox Server Detection

The remote service is used by Squeezebox Server formerly known as SlimServer and SqueezeCenter to communicate with associated streaming audio players. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid42933;...

Squeezebox Server CLI Detection

The remote service is a commandline interface for Squeezebox Server formerly known as SlimServer and SqueezeCenter, a streaming audio server from Logitech to support their range of audio receivers. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

SHOUTcast Filename Format String - ver 2 (CVE-2004-1373)

SHOUTcast is a free distributed streaming audio system developed by Nullsoft. It is widely used by Internet-based radio stations. The SHOUTcast server implements a subset of the HTTP protocol to communicate with clients. A client-server session starts with the client requesting an audio stream fr...

SHOUTcast Filename Format String (CVE-2004-1373)

SHOUTcast is a free distributed streaming audio system developed by Nullsoft. It is widely used by Internet-based radio stations. The SHOUTcast server implements a subset of the HTTP protocol to communicate with clients. A client-server session starts with the client requesting an audio stream fr...

CVE-2009-2527

Heap-based buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via 1 a crafted ASF file or 2 crafted streaming content, aka "WMP Heap Overflow Vulnerability."...

Heap overflow

Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager ACM, does not properly initialize unspecified functions within compressed audio files, which allows remote attackers to execute arbitrary code via 1 a crafted...

Heap overflow

Heap-based buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via 1 a crafted ASF file or 2 crafted streaming content, aka "WMP Heap Overflow Vulnerability."...

CVE-2009-2527

Heap-based buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via 1 a crafted ASF file or 2 crafted streaming content, aka "WMP Heap Overflow Vulnerability."...

CVE-2009-2527

CVE-2009-2527 describes a remote code execution vulnerability in Windows Media Player 6.4 caused by improper handling of specially crafted ASF files or streaming content. The heap-based buffer overflow could allow an attacker to take complete control of an affected system when a user opens a craf...

CVE-2009-2525

CVE-2009-2525 is the Windows History: The Windows Media Runtime Heap Corruption Vulnerability. A remote code execution flaw exists in Windows Media Runtime (DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager) caused by improper initialization of unspecifi...

PT-2009-4929 · Microsoft · Windows Media Runtime

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Media Runtime affected versions not specified Description: The issue is related to the improper initialization of unspecified functions within compressed audio files. This allows remote attackers to execute arbitrary code vi...

Microsoft Media Player HeaderExtensionObject Heap Overflow (MS09-052; CVE-2009-2527)

A remote code execution vulnerability exists in the way that Windows Media Player 6.4 handles specially crafted ASF files. Windows Media Player is an application for Windows that supports numerous video, audio, and image formats. ASF Advanced Systems Format is a file format that stores audio and...

Microsoft Windows Media Runtime Voice Sampler Rate Code Execution (MS09-051; CVE-2009-0555; CVE-2009-2525)

A remote code execution vulnerability exists in the way that Microsoft Windows Media Runtime and the Windows Media Player handle specially crafted ASF files. The Microsoft Windows Media Format Runtime provides information and tools for applications that use Windows Media content. Windows Media...

RealNetworks RealPlayer RealText Parsing Buffer Overflow (CVE-2005-1766)

RealPlayer is a media player developed by RealNetworks, Inc. It supports a streaming text technology called RealText to create presentations that include text content. RealText can stream documents consisting of purely text or closed-captioned video clips, for example. The RealText resources are...

Nullsoft Winamp Ultravox Streaming Metadata Parsing Stack Buffer Overflow (CVE-2008-0065)

NullSoft Winamp is a multimedia player that is capable of playing back many audio/video formats and streaming protocols. Winamp supports the Ultravox media streaming format, a proprietary streaming media protocol developed by AOL. There exists a buffer overflow vulnerability in Nullsoft Winamp...

Microsoft Windows ASF File Media Header Parsing Code Execution (MS09-047; CVE-2009-2498)

ASF Advanced Systems Format is a file format that stores audio and video information and is specially designed to run over networks like the Internet. It is a compressed format that contains streaming audio, video, slide shows, and synchronized events. ASF enables content to be delivered as a...

Microsoft Windows MP3 File Media Playback Memory Corruption (MS09-047; CVE-2009-2499)

MPEG-1 Audio Layer 3 MP3 is a file format which uses lossy compression to compress audio information. A remote code execution vulnerability has been reported in the way Microsoft Windows handles specially crafted MP3 media files. The vulnerability is due the Windows component responsible for...