Total Video Player 1.20 - '.m3u' File Local Stack Buffer Overflow

/0day Total Video Player V1.20 .M3u File Local Stack Buffer Overflow This exploit spawns Calc.exe or binds a port and spawns a shell and tested on Windows Xp sp 2. I got the ideea to look in a prior version of TVP and surprinse vuln to ,just as V1.30. When parsing a crafted .m3u file stack gets...

Total Video Player 1.03 M3U File Local Buffer Overflow Exploit

No description provided by source. /0day Total Video Player V1.03 .m3u file Local Buffer Overflow In this exploit you chose to bind a port or to spawn calc.exe. After I crafted a playlist I observed that the stack got corrupted. The corruption accured in some points,and overwriten a seh handler. ...

Total Video Player 1.03 M3U File Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ============================================================== Total Video Player 1.03 M3U File Local Buffer Overflow Exploit ============================================================== /0day Total Video Player V1.03 .m3u file Local Buffe...

tvp-overflow.txt

/0day Total Video Player V1.03 .m3u file Local Buffer Overflow In this exploit you chose to bind a port or to spawn calc.exe. After I crafted a playlist I observed that the stack got corrupted. The corruption accured in some points,and overwriten a seh handler. I managed to get control of the ECX...

Debian Security Advisory DSA 915-1 (helix-player)

The remote host is missing an update to helix-player announced via advisory DSA 915-1. An integer overflow has been discovered in helix-player, the helix audio and video player. This flaw could allow a remote attacker to run arbitrary code on a victims computer by supplying a specially crafted...

Stack overflow

Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote attackers to execute arbitrary code via a M3U playlist file that contains a long file name. NOTE: it was later reported that 1.20 and 1.30 are also affected...

CVE-2007-0949

Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote attackers to execute arbitrary code via a M3U playlist file that contains a long file name. NOTE: it was later reported that 1.20 and 1.30 are also affected...

CVE-2007-0949

The CVE-2007-0949 issue affects iTinySoft Studio Total Video Player (version 1.03, and possibly earlier; later reports include 1.20 and 1.30) and is caused by a stack-based buffer overflow when parsing .m3u playlist files containing a long file name. This leads to remote arbitrary code execution....

CVE-2007-0949

Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote attackers to execute arbitrary code via a M3U playlist file that contains a long file name. NOTE: it was later reported that 1.20 and 1.30 are also affected...

iTinySoft Studio Total Video Player buffer overflow

Buffer overflow on .m3U files parsing...

gxine audio video player format string bug

Format string bug in hostname...

[SECURITY] [DSA 477-1] New xine-ui packages fix insecure temporary file creation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 477-1 [email protected] http://www.debian.org/security/ Martin Schulze April 6th, 2004 http://www.debian.org/security/faq -...

DSA-477 xine-ui - insecure temporary file creation

Bulletin has no description...

TYPO3-EXT-SA-2026-014: Remote Code Execution in extension "HTML5 Video Player vs. Powermail" (html5videoplayer_powermail)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-014...