sox -- input sanitization errors

oCERT reports: The sox command line tool is affected by two heap-based buffer overflows, respectively located in functions startread and AdpcmReadBlock. A specially crafted wav file can be used to trigger the vulnerabilities...

Free MP3 CD Ripper WAV File Stack Buffer Overflow (CVE-2011-5165)

A vulnerability exists in Free MP3 CD Ripper 1.1. The vulnerability is due to stack-based buffer overflow when converting a file. Successful exploitation can result in arbitrary code execution via a crafted wav file...

Microsoft Windows XP WAV File Handler Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11503/info Microsoft Windows XP is reported prone to a denial of service vulnerability. The issue exists due to a lack of sufficient sanitization performed on WAV file header values before they are processed. If an exploi...

SoX - (.wav) Local Buffer Overflow Exploiter

No description provided by source. //--------------------------------- Begin Code: sox-exploiter.c --------------------------------- / Copyright Rosiello Security 2004 http://www.rosiello.org CVE Reference: CAN-2004-0557 Bug Type: Stack Overflow Date: 01/08/2004 Ulf Harnhammar reported that there...

Microsoft Windows Media Player 9/10/11 WAV File Parsing Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/33042/info Microsoft Windows Media Player is prone to a code-execution vulnerability. An attacker can exploit this issue by tricking an unsuspecting victim into opening a malicious file with the vulnerable application. A...

X-lite SIP 3.0 - (wav) memory corruption Heap BOF exploit

No description provided by source. !/usr/bin/python X-lite SIP v3 wav memory corruption Heap BOF exploit Date: 06-02-2010 Author: TecR0c Software Link: http://xlite.counterpath.com/download/win32100106 Version: 3.0 Tested on: Windows XP SP3 Usage: right click running application options Alerts &...

Boilsoft RM TO MP3 Converter 1.72 - Crash POC (.wav)

No description provided by source. Exploit Title: Boilsoft RM TO MP3 Converter 1.72 .wav - Crash POC Date: 21.11.2013 Exploit Author: Akin Tosunlar Software Link: http://www.boilsoft.net/download/rmtomp3.exe Version: 1.72 Probably old version of software and the LATEST version too Vendor Homepage...

WaveSurfer 1.8.8p4 - Memory Corruption PoC

No description provided by source. !/usr/bin/perl WaveSurfer 1.8.8p4 = Memory Corruption Exploit / PoC Author: Jean Pascal Pereira [email protected] This script creates a crafted WAV file which leads the application to crash DoS. my $crafted =...

WinDirectAudio 1.0 - (.WAV) PoC

No description provided by source. /usr/bin/perl Title: WinDirectAudio .WAV PoC +Date : May 21, 2010 +version : v1.0 +Author : ahwak2000 +Contact : z.u5athotmail.com +Geetz 2 : germayax +tested on : windows xp sp2&sp3 EN my $junk = \x41 x 5000; openmyfile,' ahwak2000.wav'; print myfile $junk.\r\n...

GOMPlayer 2.2.53.5169 (.wav) - Crash PoC

No description provided by source. Exploit Title: GOMPlayer Version 2.2.53.5169 .wav - Crash POC Date: 03-09-2013 Exploit Author: ariarat Software Link: http://download.cnet.com/GOM-Media-Player/3000-136324-10551786.html?part=dl-GOMMediaP&subj=dl&tag=button Version: 2.2.53.5169 Probably old versi...

GOM Media Player (GOMMP) 2.2.56.5183 - Memory Corruption PoC

No description provided by source. !/usr/bin/python + Author: TUNISIAN CYBER + Exploit Title: GOMMP 2.2.56.5183 Memory Corruption PoC + Date: 22-03-2014 + Category: DoS/PoC + Tested on: WinXp/Windows 7 Pro + Vendor: http://player.gomlab.com/eng/ + Friendly Sites: na3il.com,th3-creative.com +...

Thunder Kankan Player 4.8.3.840 - Stack Overflow/DOS Exploit

No description provided by source. !/usr/bin/env python print 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /\ /\ \ /\ /\ /\ \ /\ 0 0 /:/ / /::\ \ /:/ / /:/ / /::\ \ /:/ / 1 1 /:// /:/:\ \ /:/ / /:/ / /:/:\ \ /:// 0 0 /::\ \ /::\:\ \ /:/ / /:/ / /:/ :...

Fat Player 0.6b - WAV File Processing Buffer Overflow (SEH)

No description provided by source. Stack-based buffer overflow in Fat Player 0.6b allows remote attackers to execute arbitrary code via a long string in a .wav file. NOTE: some of these details are obtained from third party information. Reference:...

Free MP3 CD Ripper 1.1 - (WAV File) Stack Buffer Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

VLC Media Player Denial of Service Vulnerability -01 (Jun 2014) - Windows

VLC Media Player is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VLC Media Player Denial of Service Vulnerability -01 (Jun 2014) - Linux

VLC Media Player is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VLC Media Player Denial of Service Vulnerability -01 (Jun 2014) - Mac OS X

VLC Media Player is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MozillaThunderbird,seamonkey (important)

Mozilla Thunderbird was updated to 24.4.0. Mozilla SeaMonkey was updated to 2.25. MFSA 2014-15/CVE-2014-1493/CVE-2014-1494 Miscellaneous memory safety hazards MFSA 2014-17/CVE-2014-1497 bmo966311 Out of bounds read during WAV file decoding MFSA 2014-18/CVE-2014-1498 bmo935618...

Cisco Unity Connection目录遍历漏洞

Bugtraq ID:66676 CVE ID:CVE-2014-2145 Cisco Unity Connection 可以透明地将留言和语音识别组件与您的数据网络集成到一起，不间断地提供对呼叫和留言的全面访问。 Cisco Unity Connection的消息传送API在实现上存在目录遍历漏洞，这可使经过身份验证的远程用户通过.wav文件和audio/x-wav MIME类型的访问限制，利用此漏洞读取任意文件。 0 Cisco Unity Connection 目前厂商已经发布了升级补丁以修复漏洞，请下载使用：...

Memory corruption

Microsoft Windows Media Player WMP 11.0.5721.5230 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted WAV file...