772 matches found
CVE-2012-6303
Heap-based buffer overflow in the GetWavHeader function in generic/jkSoundFile.c in the Snack Sound Toolkit, as used in WaveSurfer 1.8.8p4, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large chunk size in a WAV file...
GLSA-201309-04 : Snack: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-201309-04 Snack: User-assisted execution of arbitrary code The GetWavHeader function in jkSoundFile.c does not have boundary checks when parsing format sub-chunks or unknown sub-chunks. Impact : A remote attacker could entice a us...
CVE-2013-5716
Gretech GOM Media Player 2.2.53.5169 and possibly earlier allows remote attackers to cause a denial of service application crash via a crafted WAV file...
Code injection
Gretech GOM Media Player 2.2.53.5169 and possibly earlier allows remote attackers to cause a denial of service application crash via a crafted WAV file...
CVE-2013-5716
Gretech GOM Media Player 2.2.53.5169 and possibly earlier allows remote attackers to cause a denial of service application crash via a crafted WAV file...
CVE-2013-5716
CVE-2013-5716 affects Gretech GOM Media Player 2.2.53.5169 and earlier. A crafted WAV file can cause a remote DoS (application crash). Public exploits exist; exploitation is remote over the network. Affected vectors are via a WAV payload. Remediation: update to the latest version. If not yet upda...
KLA10025 DoS vulnerability in GOM Media Player
An unspecified vulnerability was found in the GOM Media Player. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited from the network at a point related to an unknown application via a specially designed .WAV file. Original advisories N...
Mozilla SeaMonkey Multiple Vulnerabilities (Aug 2013) - Windows
Mozilla SeaMonkey is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
Mozilla Firefox Multiple Vulnerabilities - August 13 (Windows)
The host is installed with Mozilla Firefox and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillafirefoxmultvulnaug13win.nasl 6079 2017-05-08 09:03:33Z teissa $ Mozilla Firefox Multiple Vulnerabilities - August 13 Windows Authors: Thanga Prakash S Copyright: Copyright...
Code injection
Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allow remote attackers to cause a denial of service application crash via a crafted WAV file that is not properly handled by the nsCString::CharAt function...
Ubuntu 12.04 LTS / 12.10 / 13.04 : firefox vulnerabilities (USN-1924-1)
Jeff Gilbert, Henrik Skupin, Ben Turner, Christian Holler, Andrew McCreight, Gary Kwong, Jan Varga and Jesse Ruderman discovered multiple memory safety issues in Firefox. If the user were tricked in to opening a specially crafted page, an attacker could possibly exploit these to cause a denial of...
Ubuntu 12.04 LTS / 12.10 / 13.04 : ubufox, unity-firefox-extension update (USN-1924-2)
USN-1924-1 fixed vulnerabilities in Firefox. This update provides the corresponding updates for Ubufox and Unity Firefox Extension. Jeff Gilbert, Henrik Skupin, Ben Turner, Christian Holler, Andrew McCreight, Gary Kwong, Jan Varga and Jesse Ruderman discovered multiple memory safety issues in...
CVE-2013-1708
Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allow remote attackers to cause a denial of service application crash via a crafted WAV file that is not properly handled by the nsCString::CharAt function...
Windows Movie Maker 2.1.4026.0 Denial Of Service
Exploit Title: Windows Movie Maker Version 2.1.4026.0 .wav - Crash POC Date: 16-07-2013 Exploit Author: ariarat Vendor Homepage: http://www.microsoft.com Software Link: included in windows xp sp2 and sp3 Version: 2.1.4026.0 Tested on: Windows XP sp3 CVE : 2013-4858...
Realtek Sound Manager AvRack (.wav) - Crash PoC
Exploit for windows platform in category dos / poc junk="\x2E\x73\x6E\x64\x00\x00\x01\x18\x00\x00\x42\xDC\x00\x00\x00\x01" "\x00\x00\x1F\x40\x00\x00\x00\x00\x69\x61\x70\x65\x74\x75\x73\x2E" "\x61\x75\x00\x20\x22\x69\x61\x70\x65\x74\x75\x73\x2E\x61\x75\x22"...
Realtek Sound Manager AvRack - .wav Crash (PoC)
Realtek Sound Manager AvRack - .wav Crash PoC !/usr/bin/python Title: Realtek Sound Manager AvRack - Crach Poc version: all versions link: http://www.realtek.com.tw/ Platform: Windows XP sp3 Author: Asesino04 Blog : http://asesino04.blogspot.com/...
CVE-2011-5165
Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .wav file...
Stack overflow
Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .wav file...
CVE-2011-5165
CVE-2011-5165 concerns Free MP3 CD Ripper (versions 1.1, 2.6 and earlier). The vulnerability is a stack-based buffer overflow in the WAV conversion path that can be triggered by a crafted WAV file, enabling user-assisted remote code execution. In practice, an attacker could exploit this by convin...