CVE-2005-3092

Heap-based buffer overflow in Image-Line Software FL Studio 5.0.1 allows remote attackers to execute arbitrary code via a .flp file that contains a long path to a 1 .mid or 2 .wav file...

CVE-2005-3092

Heap-based buffer overflow in Image-Line Software FL Studio 5.0.1 allows remote attackers to execute arbitrary code via a .flp file that contains a long path to a 1 .mid or 2 .wav file...

CVE-2001-1418

AOL Instant Messenger AIM 4.7 allows remote attackers to cause a denial of service application crash via a malformed WAV file...

CVE-2001-1418

CVE-2001-1418 affects AOL Instant Messenger (AIM) 4.7, where remote attackers can trigger a denial of service by sending a malformed WAV file. The vulnerability is described with a MEDIUM base score (5.0) and a network attack vector with no authentication required; exploitation details are not pr...

Critical: Red Hat Security Advisory: RealPlayer security update

An updated RealPlayer package that fixes two buffer overflow issues is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. RealPlayer is a media player. A stack based buffer overflow bug was found in RealPlayer's Synchronized...

[VulnWatch] RealOne Player / Real .WAV Heap Overflow File Format Vulnerability

Mark Litchfield of NGSSoftware has discovered a high risk Heap Overflow vulnerability in the .WAV file format when being opened by either of the following products: Windows: RealPlayer 10.5 6.0.12.1056 and below RealPlayer 10 RealOne Player V2 RealOne Player V1 RealPlayer 8 RealPlayer Enterprise...

CVE-2004-1623

The WAV file property handler in Windows XP SP1 allows remote attackers to cause a denial of service infinite loop in Explorer via a WAV file with an invalid file header whose fmt chunk length is set to 0xFFFFFFFF...

CVE-2004-1623

The CVE-2004-1623 entry concerns the WAV file property handler in Windows XP SP1, where processing a WAV file with an invalid header (fmt chunk length = 0xFFFFFFFF) can cause an infinite loop in Explorer, leading to a denial of service. Public sources confirm the affected software as Windows XP S...

CVE-2004-1623

The WAV file property handler in Windows XP SP1 allows remote attackers to cause a denial of service infinite loop in Explorer via a WAV file with an invalid file header whose fmt chunk length is set to 0xFFFFFFFF...

Microsoft Windows XP - .WAV File Handler Denial of Service

Microsoft Windows XP - .WAV File Handler Denial of Service source: https://www.securityfocus.com/bid/11503/info Microsoft Windows XP is reported prone to a denial of service vulnerability. The issue exists due to a lack of sufficient sanitization performed on WAV file header values before they ar...

Microsoft Windows XP - '.WAV' File Handler Denial of Service

source: https://www.securityfocus.com/bid/11503/info Microsoft Windows XP is reported prone to a denial of service vulnerability. The issue exists due to a lack of sufficient sanitization performed on WAV file header values before they are processed. If an exploit attempt is successful, the Windo...

VLC Media Player < 0.8.6i WAV File Handling Remote Integer Overflow (deprecated)

Binary data 4569.prm...

CVE-2004-0557

Multiple buffer overflows in the stwavstartread function in wav.c for Sound eXchange SoX 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields...

CVE-2004-0557

Multiple buffer overflows in the stwavstartread function in wav.c for Sound eXchange SoX 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields...

CVE-2004-0557

Multiple buffer overflows in the stwavstartread function in wav.c for Sound eXchange SoX 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields...

evil_song.py

POC Exploit for SoX Stack Overflow Vulnerability found by Ulf Harnhammar Tested Under Slackware 9.1 Serkan Akpolat [email protected] | [email protected] Homepage: http://deicide.siyahsapka.org Greets to: Virulent deicide@gate:$ play britney.wav sh-2.05b$ "jmp %esp" from libc.so , change this ...

SoX - '.wav' Local Buffer Overflow

//--------------------------------- Begin Code: sox-exploiter.c --------------------------------- / Copyright Rosiello Security 2004 http://www.rosiello.org CVE Reference: CAN-2004-0557 Bug Type: Stack Overflow Date: 01/08/2004 Ulf Harnhammar reported that there are two buffer overflows in the...

SoX Local Buffer Overflow Exploiter (Via Crafted WAV File)

Exploit for linux platform in category local exploits ========================================================== SoX Local Buffer Overflow Exploiter Via Crafted WAV File ========================================================== --------------------------------- Begin Code: sox-exploiter.c...

CVE-2004-0557

CVE-2004-0557 covers two buffer overflows in SoX (St_WavStartRead in wav.c) affecting 12.17.2–12.17.4. A remote attacker could execute arbitrary code by feeding a specially crafted WAV header. Public docs identify the vulnerable function and the header-field handling as the root cause; affected v...

CVE-2004-0557

Multiple buffer overflows in the stwavstartread function in wav.c for Sound eXchange SoX 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields...