CVE-2016-3941

Buffer overflow in the AStreamPeekStream function in input/stream.c in VideoLAN VLC media player before 2.2.0 allows remote attackers to cause a denial of service crash via a crafted wav file, related to "seek across EOF."...

UBUNTU-CVE-2016-3941

Buffer overflow in the AStreamPeekStream function in input/stream.c in VideoLAN VLC media player before 2.2.0 allows remote attackers to cause a denial of service crash via a crafted wav file, related to "seek across EOF."...

CVE-2016-3941

Buffer overflow in the AStreamPeekStream function in input/stream.c in VideoLAN VLC media player before 2.2.0 allows remote attackers to cause a denial of service crash via a crafted wav file, related to "seek across EOF."...

CVE-2016-3941

CVE-2016-3941 affects VideoLAN VLC media player prior to 2.2.0. The issue is a buffer/heap overflow in the AStreamPeekStream function (input/stream.c) that can be triggered by a crafted WAV file, enabling a denial of service (crash) via a seek across EOF. OpenSUSE advisories indicate the CVE was ...

CVE-2016-3941

Buffer overflow in the AStreamPeekStream function in input/stream.c in VideoLAN VLC media player before 2.2.0 allows remote attackers to cause a denial of service crash via a crafted wav file, related to "seek across EOF."...

KLA10791 Buffer overflow vulnerability in VLC media player

Buffer overflow vulnerability was found in VLC media player. By exploiting this vulnerability malicious users can cause a denial of service crash. This vulnerability can be exploited remotely via a crafted wav file. Technical details This vulnerability is in the AStreamPeekStream function in...

[SECURITY] Fedora 23 Update: libsndfile-1.0.25-18.fc23

libsndfile is a C library for reading and writing sound files such as AIFF, AU, WAV, and others through one standard interface. It can currently read/write 8, 16, 24 and 32-bit PCM files as well as 32 and 64-bit floating point WAV files and a number of compressed formats. It compiles and runs on...

SUSE SLED11 Security Update : vorbis-tools (SUSE-SU-2015:1775-1)

vorbis-tools was updated to fix several security issues. - A buffer overflow in aiffopen that could be triggered by opening prepared malicious files CVE-2015-6749, bsc943795. - A division by zero and integer overflow by crafted WAV files was fixed CVE-2014-9638, CVE-2014-9639, bnc914439, bnc91444...

Boxoft WAV To MP3 COnverter 1.1 Buffer Overflow

Exploit Title: Boxoft WAV to MP3 Converter 1.1 - SEH Buffer Overflow Date: 10/13/2015 Exploit Author: ArminCyber Contact: [email protected] Version: 1.1 Tested on: XP SP3 EN Description: A malicious .aiff file cause this vulnerability. category: Local Exploit f = open"malicious.aiff", "w"...

Boxoft WAV to MP3 Converter 1.1 - Local Buffer Overflow (SEH)

Boxoft WAV to MP3 Converter 1.1 - Local Buffer Overflow SEH Exploit Title: Boxoft WAV to MP3 Converter 1.1 - SEH Buffer Overflow Date: 10/13/2015 Exploit Author: ArminCyber Contact: [email protected] Version: 1.1 Tested on: XP SP3 EN Description: A malicious .aiff file cause this...

Boxoft WAV to MP3 Converter 1.1 - Local Buffer Overflow (SEH)

Exploit Title: Boxoft WAV to MP3 Converter 1.1 - SEH Buffer Overflow Date: 10/13/2015 Exploit Author: ArminCyber Contact: [email protected] Version: 1.1 Tested on: XP SP3 EN Description: A malicious .aiff file cause this vulnerability. category: Local Exploit f = open"malicious.aiff", "w"...

Boxoft WAV to MP3 Converter 1.1 - SEH Buffer Overflow Exploit

Exploit for windows platform in category local exploits Exploit Title: Boxoft WAV to MP3 Converter 1.1 - SEH Buffer Overflow Date: 10/13/2015 Exploit Author: ArminCyber Contact: email protected Version: 1.1 Tested on: XP SP3 EN Description: A malicious .aiff file cause this vulnerability. categor...

Debian DLA-317-1 : vorbis-tools security update

Various issues have been fixed in Debian LTS squeeze for package vorbis-tools. CVE-2014-9638 A crafted WAV file with number of channels set to 0 will cause oggenc to crash due to a division by zero issue. This issue has been fixed upstream by providing a fix for CVE-2014-9639. Reported upstream b...

Boxoft WAV to MP3 Converter Buffer Overflow Vulnerability

Boxoft WAV to MP3 Converter is a set of free audio conversion tools from Boxoft. A buffer overflow vulnerability exists in Boxoft WAV to MP3 Converter. This allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file...

CVE-2015-7243

Buffer overflow in Boxoft WAV to MP3 Converter allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted WAV file...

Buffer overflow

Buffer overflow in Boxoft WAV to MP3 Converter allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted WAV file...

CVE-2015-7243

Buffer overflow in Boxoft WAV to MP3 Converter allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted WAV file...

CVE-2015-7243

Boxoft WAV to MP3 Converter is affected by CVE-2015-7243, a stack/SEH-based buffer overflow in the WAV to MP3 conversion process for versions 1.0 and 1.1. A crafted WAV file can trigger a crash and potentially allow remote code execution. Exploit paths are documented (Exploit-DB/Metasploit module...

FreeBSD : vorbis-tools, opus-tools -- multiple vulnerabilities (a35f415d-572a-11e5-b0a4-f8b156b6dcc8)

Paris Zoumpouloglou reports : I discovered an integer overflow issue in oggenc, related to the number of channels in the input WAV file. The issue triggers an out-of-bounds memory access which causes oggenc to crash. Paris Zoumpouloglou reports : A crafted WAV file with number of channels set to ...

Boxoft WAV to MP3 Converter - convert 特性缓冲区溢出

首先拿到poc，先看看，明显的溢出，利用的是SEH的结构 !/usr/bin/python using=utf-8 f = open"malicious.aiff", "w" f.write"A"4132 f.write"\xeb\x06\x90\x90"nseh f.write"\xa4\x43\x40\x00"seh Shellcode: windows/exec - 277 bytes CMD=calc.exe f.write"\x90"20 f.write"\xba\xd5\x31\x08\x38\xdb\xcb\xd9\x74\x24\xf4\x5b\x29\xc9\xb1"...