CVE-2007-3308

Simple Machines Forum SMF 1.1.2 uses a concatenation method with insufficient randomization when creating a WAV file CAPTCHA, which allows remote attackers to pass the CAPTCHA test via an automated brute-force attack...

CVE-2007-3308: Undefined Security Weakness

Simple Machines Forum SMF 1.1.2 uses a concatenation method with insufficient randomization when creating a WAV file CAPTCHA, which allows remote attackers to pass the CAPTCHA test via an automated brute-force attack...

FTP Server Zipped .wav File Detection

Binary data 4043.prm...

Code injection

winmm.dll in Microsoft Windows XP allows user-assisted remote attackers to cause a denial of service infinite loop via a large cch argument value to the mmioRead function, as demonstrated by a crafted WAV file...

CVE-2007-1492

winmm.dll in Microsoft Windows XP allows user-assisted remote attackers to cause a denial of service infinite loop via a large cch argument value to the mmioRead function, as demonstrated by a crafted WAV file...

CVE-2007-1492

winmm.dll in Microsoft Windows XP allows user-assisted remote attackers to cause a denial of service infinite loop via a large cch argument value to the mmioRead function, as demonstrated by a crafted WAV file...

CVE-2007-1492

CVE-2007-1492 affects winmm.dll on Windows XP. The vulnerable component is mmioRead, triggered by a crafted WAV file with a large cch argument value, enabling user-assisted remote attackers to cause a denial-of-service (infinite loop). Exploitation context and specific versions beyond Windows XP ...

CVE-2007-1492: Undefined Security Weakness

winmm.dll in Microsoft Windows XP allows user-assisted remote attackers to cause a denial of service infinite loop via a large cch argument value to the mmioRead function, as demonstrated by a crafted WAV file...

Microsoft Windows XP2000 - WinMM.dll .WAV Remote Denial of Service

Microsoft Windows XP2000 - WinMM.dll .WAV Remote Denial of Service source: https://www.securityfocus.com/bid/22938/info Microsoft Windows is prone to a denial-of-service vulnerability. A remote attacker may exploit this vulnerability by presenting a malicious WAV file to a victim user. Successful...

Policy - .wav File Detection

Binary data 3828.prm...

SoX Local Buffer Overflow Exploiter (Via Crafted WAV File)

No description provided by source. --------------------------------- Begin Code: sox-exploiter.c --------------------------------- / Copyright Rosiello Security 2004 http://www.rosiello.org CVE Reference: CAN-2004-0557 Bug Type: Stack Overflow Date: 01/08/2004 Ulf Harnhammar reported that there a...

200511-asterisk.txt

Assurance.com.au - Vulnerability Advisory ----------------------------------------------- Release Date: 07-Nov-2005 Software: Asterisk Web-VoiceMail Comedian VoiceMail http://www.asterisk.org/ Asterisk is a complete PBX in software. It runs on Linux, BSD and MacOSX and provides all of the feature...

Asterisk PBX server voice mail mailbox directory traversal

Web interface directory traversal allows to download any .wav file...

CVE-2005-3092

Heap-based buffer overflow in Image-Line Software FL Studio 5.0.1 allows remote attackers to execute arbitrary code via a .flp file that contains a long path to a 1 .mid or 2 .wav file...

CVE-2005-3092

Heap-based buffer overflow in Image-Line Software FL Studio 5.0.1 allows remote attackers to execute arbitrary code via a .flp file that contains a long path to a 1 .mid or 2 .wav file...

CVE-2001-1418

CVE-2001-1418 affects AOL Instant Messenger (AIM) 4.7, where remote attackers can trigger a denial of service by sending a malformed WAV file. The vulnerability is described with a MEDIUM base score (5.0) and a network attack vector with no authentication required; exploitation details are not pr...

CVE-2001-1418

AOL Instant Messenger AIM 4.7 allows remote attackers to cause a denial of service application crash via a malformed WAV file...

CVE-2001-1418: Undefined Security Weakness

AOL Instant Messenger AIM 4.7 allows remote attackers to cause a denial of service application crash via a malformed WAV file...

Critical: Red Hat Security Advisory: RealPlayer security update

An updated RealPlayer package that fixes two buffer overflow issues is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. RealPlayer is a media player. A stack based buffer overflow bug was found in RealPlayer's Synchronized...

[VulnWatch] RealOne Player / Real .WAV Heap Overflow File Format Vulnerability

Mark Litchfield of NGSSoftware has discovered a high risk Heap Overflow vulnerability in the .WAV file format when being opened by either of the following products: Windows: RealPlayer 10.5 6.0.12.1056 and below RealPlayer 10 RealOne Player V2 RealOne Player V1 RealPlayer 8 RealPlayer Enterprise...