Total Video Player 1.20 - '.m3u' File Local Stack Buffer Overflow

/0day Total Video Player V1.20 .M3u File Local Stack Buffer Overflow This exploit spawns Calc.exe or binds a port and spawns a shell and tested on Windows Xp sp 2. I got the ideea to look in a prior version of TVP and surprinse vuln to ,just as V1.30. When parsing a crafted .m3u file stack gets...

Total Video Player 1.03 M3U File Local Buffer Overflow Exploit

No description provided by source. /0day Total Video Player V1.03 .m3u file Local Buffer Overflow In this exploit you chose to bind a port or to spawn calc.exe. After I crafted a playlist I observed that the stack got corrupted. The corruption accured in some points,and overwriten a seh handler. ...

tvp-overflow.txt

/0day Total Video Player V1.03 .m3u file Local Buffer Overflow In this exploit you chose to bind a port or to spawn calc.exe. After I crafted a playlist I observed that the stack got corrupted. The corruption accured in some points,and overwriten a seh handler. I managed to get control of the ECX...

Total Video Player 1.03 M3U File Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ============================================================== Total Video Player 1.03 M3U File Local Buffer Overflow Exploit ============================================================== /0day Total Video Player V1.03 .m3u file Local Buffe...

Debian Security Advisory DSA 915-1 (helix-player)

The remote host is missing an update to helix-player announced via advisory DSA 915-1. An integer overflow has been discovered in helix-player, the helix audio and video player. This flaw could allow a remote attacker to run arbitrary code on a victims computer by supplying a specially crafted...

Stack overflow

Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote attackers to execute arbitrary code via a M3U playlist file that contains a long file name. NOTE: it was later reported that 1.20 and 1.30 are also affected...

CVE-2007-0949

Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote attackers to execute arbitrary code via a M3U playlist file that contains a long file name. NOTE: it was later reported that 1.20 and 1.30 are also affected...

CVE-2007-0949

Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote attackers to execute arbitrary code via a M3U playlist file that contains a long file name. NOTE: it was later reported that 1.20 and 1.30 are also affected...

CVE-2007-0949

The CVE-2007-0949 issue affects iTinySoft Studio Total Video Player (version 1.03, and possibly earlier; later reports include 1.20 and 1.30) and is caused by a stack-based buffer overflow when parsing .m3u playlist files containing a long file name. This leads to remote arbitrary code execution....

iTinySoft Studio Total Video Player buffer overflow

Buffer overflow on .m3U files parsing...

CVE-2007-0949: Undefined Security Weakness

Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote attackers to execute arbitrary code via a M3U playlist file that contains a long file name. NOTE: it was later reported that 1.20 and 1.30 are also affected...

gxine audio video player format string bug

Format string bug in hostname...

[SECURITY] [DSA 477-1] New xine-ui packages fix insecure temporary file creation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 477-1 [email protected] http://www.debian.org/security/ Martin Schulze April 6th, 2004 http://www.debian.org/security/faq -...

DSA-477 xine-ui - insecure temporary file creation

Bulletin has no description...

TYPO3-EXT-SA-2026-014: Remote Code Execution in extension "HTML5 Video Player vs. Powermail" (html5videoplayer_powermail)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-014...