Zortam MP3 Media Studio 9.40 Memory Corruption

!/usr/bin/perl Title: Zortam MP3 Media Studio 9.40 Multiple Memory Corruption Vulnerabilities Product web page: http://www.zortam.com Desc: Zortam MP3 Studio version 9.40 suffers from a memory corruption attack from two different malicious files. The first method is thru a .mp3 file which has its...

MixSense 1.0.0.1 DJ Studio Crash

!/usr/bin/perl -w MixSense 1.0.0.1 DJ Studio .mp3 file Crash Vulnerability Exploit Founded and exploited by prodigy Contact: [email protected] Vendor: MixSense Usage to reproduce the bug: when you created the malicious file, open with Mixsense and booom! Platform: Windows ==PoC== use...

MixSense 1.0.0.1 DJ Studio (.mp3 file) Crash Exploit

Exploit for unknown platform in category dos / poc ==================================================== MixSense 1.0.0.1 DJ Studio .mp3 file Crash Exploit ==================================================== !/usr/bin/perl -w MixSense 1.0.0.1 DJ Studio .mp3 file Crash Vulnerability Exploit Founde...

MixSense 1.0.0.1 DJ Studio (.mp3 file) Crash Exploit

No description provided by source. !/usr/bin/perl -w MixSense 1.0.0.1 DJ Studio .mp3 file Crash Vulnerability Exploit Founded and exploited by prodigy Contact: [email protected] Vendor: MixSense Usage to reproduce the bug: when you created the malicious file, open with Mixsense and booom...

MixSense 1.0.0.1 DJ Studio - '.mp3' Crash

!/usr/bin/perl -w MixSense 1.0.0.1 DJ Studio .mp3 file Crash Vulnerability Exploit Founded and exploited by prodigy Contact: [email protected] Vendor: MixSense Usage to reproduce the bug: when you created the malicious file, open with Mixsense and booom! Platform: Windows ==PoC== use...

Zortam MP3 Media Studio 9.40 - Multiple Memory Corruption Vulnerabilities

!/usr/bin/perl Title: Zortam MP3 Media Studio 9.40 Multiple Memory Corruption Vulnerabilities Product web page: http://www.zortam.com Desc: Zortam MP3 Studio version 9.40 suffers from a memory corruption attack from two different malicious files. The first method is thru a .mp3 file which has its...

MixSense 1.0.0.1 DJ Studio - .mp3 Crash

MixSense 1.0.0.1 DJ Studio - .mp3 Crash !/usr/bin/perl -w MixSense 1.0.0.1 DJ Studio .mp3 file Crash Vulnerability Exploit Founded and exploited by prodigy Contact: [email protected] Vendor: MixSense Usage to reproduce the bug: when you created the malicious file, open with Mixsense and...

Zortam MP3 Media Studio 9.40 Multiple Memory Corruption Vulns

Exploit for unknown platform in category dos / poc ============================================================= Zortam MP3 Media Studio 9.40 Multiple Memory Corruption Vulns ============================================================= !/usr/bin/perl Title: Zortam MP3 Media Studio 9.40 Multiple...

Zortam MP3 Media Studio 9.40 - Multiple Memory Corruption Vulnerabilities

Zortam MP3 Media Studio 9.40 - Multiple Memory Corruption Vulnerabilities !/usr/bin/perl Title: Zortam MP3 Media Studio 9.40 Multiple Memory Corruption Vulnerabilities Product web page: http://www.zortam.com Desc: Zortam MP3 Studio version 9.40 suffers from a memory corruption attack from two...

Zortam MP3 Media Studio 9.40 Multiple Memory Corruption Vulns

No description provided by source. !/usr/bin/perl Title: Zortam MP3 Media Studio 9.40 Multiple Memory Corruption Vulnerabilities Product web page: http://www.zortam.com Desc: Zortam MP3 Studio version 9.40 suffers from a memory corruption attack from two different malicious files. The first metho...

Zortam MP3 Media Studio 9.40 Multiple Memory Corruption Vulnerabilities

Summary Zortam Mp3 Media Studio is all-in-one Mp3 application that contains Mp3 ID3 Tag Organizer for searching and cataloguing Mp3 files into Mp3 library, editing ID3v1 and ID3v2.4 tags ID3 Tag Editor-Mp3 Tag Editor, CD Ripper with album cover art/lyric support that uses CDDB Internet Compact Di...

Security feature bypass

Worldweaver DX Studio Player 3.0.29.0, 3.0.22.0, 3.0.12.0, and probably other versions before 3.0.29.1, when used as a plug-in for Firefox, does not restrict access to the shell.execute JavaScript API method, which allows remote attackers to execute arbitrary commands via a .dxstudio file that...

CVE-2009-2011

Worldweaver DX Studio Player 3.0.29.0, 3.0.22.0, 3.0.12.0, and probably other versions before 3.0.29.1, when used as a plug-in for Firefox, does not restrict access to the shell.execute JavaScript API method, which allows remote attackers to execute arbitrary commands via a .dxstudio file that...

CVE-2009-2011

Worldweaver DX Studio Player 3.0.29.0, 3.0.22.0, 3.0.12.0, and probably other versions before 3.0.29.1, when used as a plug-in for Firefox, does not restrict access to the shell.execute JavaScript API method, which allows remote attackers to execute arbitrary commands via a .dxstudio file that...

CVE-2009-2011

Summary (CVE-2009-2011) Worldweaver DX Studio Player plugin for Firefox (and related IE/Firefox contexts) is vulnerable to remote command execution via the shell.execute JavaScript API method. The issue affects DX Studio Player versions including 3.0.29.0, 3.0.22.0, 3.0.12.0 and likely other vers...

PT-2009-4465 · Mozilla +1 · Firefox +1

Name of the Vulnerable Software and Affected Versions: Worldweaver DX Studio Player versions prior to 3.0.29.1 Description: The issue allows remote attackers to execute arbitrary commands via a .dxstudio file that invokes the shell.execute JavaScript API method, due to a lack of access restrictio...

DX Studio Player Firefox plug-in code execution

It's possible to execute system commands via Javascript API...

CORE-2009-0521 - DX Studio Player Firefox plug-in command injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ DX Studio Player Firefox plug-in command injection 1. Advisory Information Title: DX Studio Player Firefox plug-in command injection Advisory ID: CORE-2009-0521...

DX Studio Player < 3.0.29.1 Firefox plug-in Command Injection Vuln

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ DX Studio Player Firefox plug-in command injection 1. Advisory Information Title: DX Studio Player Firefox plug-in command injectio...

DX Studio Player < 3.0.29.1 Firefox plug-in Command Injection Vuln

Exploit for windows platform in category remote exploits ================================================================== DX Studio Player 3.0.29.1 Firefox plug-in Command Injection Vuln ================================================================== -----BEGIN PGP SIGNED MESSAGE----- Hash:...