1695 matches found
Code injection
winmm.dll in Microsoft Windows XP allows user-assisted remote attackers to cause a denial of service infinite loop via a large cch argument value to the mmioRead function, as demonstrated by a crafted WAV file...
CVE-2007-1492
winmm.dll in Microsoft Windows XP allows user-assisted remote attackers to cause a denial of service infinite loop via a large cch argument value to the mmioRead function, as demonstrated by a crafted WAV file...
CVE-2007-1492
winmm.dll in Microsoft Windows XP allows user-assisted remote attackers to cause a denial of service infinite loop via a large cch argument value to the mmioRead function, as demonstrated by a crafted WAV file...
CVE-2007-1492
CVE-2007-1492 affects winmm.dll on Windows XP. The vulnerable component is mmioRead, triggered by a crafted WAV file with a large cch argument value, enabling user-assisted remote attackers to cause a denial-of-service (infinite loop). Exploitation context and specific versions beyond Windows XP ...
CVE-2007-1492: Undefined Security Weakness
winmm.dll in Microsoft Windows XP allows user-assisted remote attackers to cause a denial of service infinite loop via a large cch argument value to the mmioRead function, as demonstrated by a crafted WAV file...
Microsoft Windows XP2000 - WinMM.dll .WAV Remote Denial of Service
Microsoft Windows XP2000 - WinMM.dll .WAV Remote Denial of Service source: https://www.securityfocus.com/bid/22938/info Microsoft Windows is prone to a denial-of-service vulnerability. A remote attacker may exploit this vulnerability by presenting a malicious WAV file to a victim user. Successful...
Microsoft Windows XP/2000 - 'WinMM.dll' / '.WAV' Remote Denial of Service
source: https://www.securityfocus.com/bid/22938/info Microsoft Windows is prone to a denial-of-service vulnerability. A remote attacker may exploit this vulnerability by presenting a malicious WAV file to a victim user. Successful exploits will result in excessive CPU consumption, effectively...
Policy - .wav File Detection
Binary data 3828.prm...
SoX Local Buffer Overflow Exploiter (Via Crafted WAV File)
No description provided by source. --------------------------------- Begin Code: sox-exploiter.c --------------------------------- / Copyright Rosiello Security 2004 http://www.rosiello.org CVE Reference: CAN-2004-0557 Bug Type: Stack Overflow Date: 01/08/2004 Ulf Harnhammar reported that there a...
CVE-2006-2021
Absolute path traversal vulnerability in recordings/misc/audio.php in the Asterisk Recording Interface ARI web interface in Asterisk@Home before 2.8 allows remote attackers to read arbitrary MP3, WAV, and GSM files via a full pathname in the recording parameter. NOTE: this issue can also be used ...
CVE-2006-2021
Absolute path traversal vulnerability in recordings/misc/audio.php in the Asterisk Recording Interface ARI web interface in Asterisk@Home before 2.8 allows remote attackers to read arbitrary MP3, WAV, and GSM files via a full pathname in the recording parameter. NOTE: this issue can also be used ...
Asterisk Recording Interface 0.7.15 - Audio.php Information Disclosure
Asterisk Recording Interface 0.7.15 - Audio.php Information Disclosure source: https://www.securityfocus.com/bid/17641/info Asterisk Recording Interface is prone to an information-disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input...
Asterisk Recording Interface 0.7.15 - 'Audio.php' Information Disclosure
source: https://www.securityfocus.com/bid/17641/info Asterisk Recording Interface is prone to an information-disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary MP3,...
CVE-2005-3559
Directory traversal vulnerability in vmail.cgi in Asterisk 1.0.9 through 1.2.0-beta1 allows remote attackers to access WAV files via a .. dot dot in the folder parameter...
CVE-2005-3559
Directory traversal vulnerability in vmail.cgi in Asterisk 1.0.9 through 1.2.0-beta1 allows remote attackers to access WAV files via a .. dot dot in the folder parameter...
CVE-2005-3559
Directory traversal vulnerability in vmail.cgi in Asterisk 1.0.9 through 1.2.0-beta1 allows remote attackers to access WAV files via a .. dot dot in the folder parameter...
CVE-2005-3559
Directory traversal vulnerability in vmail.cgi in Asterisk 1.0.9 through 1.2.0-beta1 allows remote attackers to access WAV files via a .. dot dot in the folder parameter...
CVE-2005-3559: Undefined Security Weakness
Directory traversal vulnerability in vmail.cgi in Asterisk 1.0.9 through 1.2.0-beta1 allows remote attackers to access WAV files via a .. dot dot in the folder parameter...
200511-asterisk.txt
Assurance.com.au - Vulnerability Advisory ----------------------------------------------- Release Date: 07-Nov-2005 Software: Asterisk Web-VoiceMail Comedian VoiceMail http://www.asterisk.org/ Asterisk is a complete PBX in software. It runs on Linux, BSD and MacOSX and provides all of the feature...
