1503 matches found
EasyITSP 2.0.7 Directory Traversal
Directory Traversal - EasyITSP = 2.0.7 EasyITSP - Telephone System VoIP http://blaszczakm.blogspot.com Michal Blaszczak Search/Read/Delete filetype .txt Search/Play/Delete filetype .wav - Voicemail file: voicemail.php line: 220 foreach glob"$vmdir/$SESSIONphone/$vmfolder/.txt" as $filename file:...
RealNetworks RealPlayer WAV File Processing Code Execution (CVE-2005-0611)
A flaw exists in the way RealPlayer processes files encoded using the WAVE format. The vulnerability occurs when RealPlayer attempts to parse a crafted WAV file with an incorrect LIST chunk. An attacker can exploit this vulnerability to inject and execute arbitrary code with the privileges of the...
CVE-2011-5165
Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .wav file...
Stack overflow
Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .wav file...
CVE-2011-5165
Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .wav file...
CVE-2011-5165
CVE-2011-5165 concerns Free MP3 CD Ripper (versions 1.1, 2.6 and earlier). The vulnerability is a stack-based buffer overflow in the WAV conversion path that can be triggered by a crafted WAV file, enabling user-assisted remote code execution. In practice, an attacker could exploit this by convin...
WaveSurfer 1.8.8p4 Memory Corruption
!/usr/bin/perl WaveSurfer 1.8.8p4 This script creates a crafted WAV file which leads the application to crash DoS. my $crafted = "\x52\x49\x46\x46\x20\x12\x01\x00\x57\x41\x56\x45\x66\x6D\x74\x20". "\x10\x00\x00\x00\x01\x00\x01\x00\x44\xAC\x00\x00\x88\x58\x01\x00"...
WaveSurfer 1.8.8p4 - Memory Corruption (PoC)
WaveSurfer 1.8.8p4 - Memory Corruption PoC !/usr/bin/perl WaveSurfer 1.8.8p4 This script creates a crafted WAV file which leads the application to crash DoS. my $crafted = "\x52\x49\x46\x46\x20\x12\x01\x00\x57\x41\x56\x45\x66\x6D\x74\x20"...
WaveSurfer 1.8.8p4 <= Memory Corruption PoC
Exploit for windows platform in category dos / poc !/usr/bin/perl WaveSurfer 1.8.8p4 This script creates a crafted WAV file which leads the application to crash DoS. my $crafted = "\x52\x49\x46\x46\x20\x12\x01\x00\x57\x41\x56\x45\x66\x6D\x74\x20"...
CVE-2011-2911
Integer overflow in the CSoundFile::ReadWav function in src/loadwav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer overflow...
Integer overflow
Integer overflow in the CSoundFile::ReadWav function in src/loadwav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer overflow...
CVE-2011-2911
Integer overflow in the CSoundFile::ReadWav function in src/loadwav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer overflow...
CVE-2011-2911
Integer overflow in the CSoundFile::ReadWav function in src/loadwav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer overflow...
Zinf Audio Player (m3u file) Buffer Overflow (SEH)
Exploit for windows platform in category local exploits !/usr/bin/python Product Details: --------------------------------------------------------------------------------- The Zinf audio player is a simple, but powerful audio player for Linux and Win32. It supports MP3, Ogg/Vorbis, WAV and Audio ...
Debian DSA-2415-1 : libmodplug - several vulnerabilities
Several vulnerabilities that can lead to the execution of arbitrary code have been discovered in libmodplug, a library for MOD music based on ModPlug. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2011-1761 epiphant discovered that the abc file parser is...
SuSE 10 Security Update : audiofile (ZYPP Patch Number 7394)
A heap-overflow in libaudiofile was fixed. The overflow existsed in the WAV processing code and can be exploited to execute arbitrary code. This update also contains fixed audiofile-32bit packages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novel...
Free MP3 CD Ripper 1.1 (WAV File) Stack Buffer Overflow
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Free MP3 CD Rippe...
Free MP3 CD Ripper 1.1 - '.wav' Local Stack Buffer Overflow (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Free MP3 CD Rippe...
Free MP3 CD Ripper 1.1 (WAV File) Stack Buffer Overflow
Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
Thunder Kankan Player Denial Of Service
!/usr/bin/env python print """ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /\ /\ \ /\ /\ /\ \ /\ 0 0 /:/ / /::\ \ /:/ / /:/ / /::\ \ /:/ / 1 1 /:// /:/:\ \ /:/ / /:/ / /:/:\ \ /:// 0 0 /::\ \ /::\:\ \ /:/ / /:/ / /:/ :\ \ /::\ 1 1 /:/:\ /\ /:/:...