CVE-2006-4192

Multiple buffer overflows in MODPlug Tracker OpenMPT 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via 1 long strings in ITP files used by the CSoundFile::ReadITProject functi...

CVE-2006-4192

Multiple buffer overflows in MODPlug Tracker OpenMPT 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via 1 long strings in ITP files used by the CSoundFile::ReadITProject functi...

DEBIAN-CVE-2006-4192

Multiple buffer overflows in MODPlug Tracker OpenMPT 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via 1 long strings in ITP files used by the CSoundFile::ReadITProject functi...

CVE-2006-4192

Multiple buffer overflows in MODPlug Tracker OpenMPT 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via 1 long strings in ITP files used by the CSoundFile::ReadITProject functi...

CVE-2006-4192

Multiple buffer overflows in MODPlug Tracker OpenMPT 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via 1 long strings in ITP files used by the CSoundFile::ReadITProject functi...

CVE-2006-4192

CVE-2006-4192 is a buffer overflow vulnerability in libmodplug modules embedded in GStreamer (via MODPlug Tracker/OpenMPT usage) that could allow remote code execution when processing crafted ITProject/AMF files. Connected advisories (RHSA-2011:0477 and related OpenVAS/Nessus entries) describe an...

CVE-2006-4192

Multiple buffer overflows in MODPlug Tracker OpenMPT 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via 1 long strings in ITP files used by the CSoundFile::ReadITProject functi...

Multiple MODPlug Tracker/OpenMPT security vulnerabilities

Few heap and stack based buffer overflows...

GLSA-200608-14 : DUMB: Heap buffer overflow

The remote host is affected by the vulnerability described in GLSA-200608-14 DUMB: Heap buffer overflow Luigi Auriemma found a heap-based buffer overflow in the itreadenvelope function which reads the envelope values for volume, pan and pitch of the instruments referenced in a '.it' Impulse Track...

php local buffer underflow could lead to arbitary code execution

Affected versions: php 5.1.4 and older, 4.4.3 and possibly older Cause: when php-s sscanf functions format argument contains argument swap and extra arguments are given like. sscanf'foo ','$1s',$bar then it reads an pointer to pointer to zval structure past the end of argument array by one. Php...

CVE-2006-3879

Integer overflow in the loadChunk function in loaders/loadgt2.c in libmikmod in Mikmod Sound System 3.2.2 allows remote attackers to cause a denial of service via a GRAOUMF TRACKER GT2 module file with a large 0xffffffff comment length value in an XCOM chunk...

CVE-2006-3814

Buffer overflow in the LoaderXM::loadinstrumentinternal function in loaderxm.cpp for Cheese Tracker 0.9.9 and earlier allows user-assisted attackers to execute arbitrary code via a crafted file with a large amount of extra data...

CVE-2006-3814

Buffer overflow in the LoaderXM::loadinstrumentinternal function in loaderxm.cpp for Cheese Tracker 0.9.9 and earlier allows user-assisted attackers to execute arbitrary code via a crafted file with a large amount of extra data...

CVE-2006-3814

Cheese Tracker (up to version 0.9.9) is affected by a buffer overflow in the XM loader component (loader_xm.cpp). The vulnerability, described in CVE-2006-3814, allows a crafted input file with a large amount of data to potentially execute arbitrary code. Connected advisories (Gentoo GLSA 200610-...

CVE-2006-3814

Buffer overflow in the LoaderXM::loadinstrumentinternal function in loaderxm.cpp for Cheese Tracker 0.9.9 and earlier allows user-assisted attackers to execute arbitrary code via a crafted file with a large amount of extra data...

Buffer-overflow in the XM loader of Cheese Tracker 0.9.9

Luigi Auriemma Application: Cheese Tracker http://reduz.com.ar/cheesetracker/ http://sourceforge.net/projects/cheesetronic Versions: = 0.9.9 and current CVS Platforms: nix and others Bug: buffer-overflow in LoaderXM::loadinstrumentinternal Exploitation: local Date: 23 Jul 2006 Author: Luigi...

Cheese Tracker <= 0.9.9 Local Buffer Overflow Exploit PoC

No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include stdint.h include string.h define VER "0.1" define CPOS 243 // reader.getfilepos-pcpos define JUNKSZ 500 + CPOS // Uint8 junkbuster500 define OVERFLOW 740 // overflow define BOFSZNUM JUNKSZ + OVERFLOW...

Cheese Tracker <= 0.9.9 Local Buffer Overflow Exploit PoC

Exploit for unknown platform in category local exploits ========================================================= Cheese Tracker include include include define VER "0.1" define CPOS 243 // reader.getfilepos-pcpos define JUNKSZ 500 + CPOS // Uint8 junkbuster500 define OVERFLOW 740 // overflow defi...

Cheese Tracker 0.9.9 - Local Buffer Overflow

Cheese Tracker 0.9.9 - Local Buffer Overflow / by Luigi Auriemma / include include include include define VER "0.1" define CPOS 243 // reader.getfilepos-pcpos define JUNKSZ 500 + CPOS // Uint8 junkbuster500 define OVERFLOW 740 // overflow define BOFSZNUM JUNKSZ + OVERFLOW define BOFSZ JUNKSZ +...

Cheese Tracker 0.9.9 - Local Buffer Overflow

/ by Luigi Auriemma / include include include include define VER "0.1" define CPOS 243 // reader.getfilepos-pcpos define JUNKSZ 500 + CPOS // Uint8 junkbuster500 define OVERFLOW 740 // overflow define BOFSZNUM JUNKSZ + OVERFLOW define BOFSZ JUNKSZ + OVERFLOW - CPOS define myzerox memsetx, 0,...