Asterisk 0.x1.01.2 Voicemail - Unauthorized Access

Asterisk 0.x1.01.2 Voicemail - Unauthorized Access source: https://www.securityfocus.com/bid/15336/info Asterisk is prone to an unauthorized-access vulnerability. This issue is due to a failure in the application to properly verify user-supplied input. Successful exploitation will grant an attack...

CVE-2005-3312

The HTML rendering engine in Microsoft Internet Explorer 6.0 allows remote attackers to conduct cross-site scripting XSS attacks via HTML in corrupted images and other files such as .GIF, JPG, and WAV, which is rendered as HTML when the user clicks on the link, even though the web server response...

CVE-2005-3092

Heap-based buffer overflow in Image-Line Software FL Studio 5.0.1 allows remote attackers to execute arbitrary code via a .flp file that contains a long path to a 1 .mid or 2 .wav file...

CVE-2005-3092

Heap-based buffer overflow in Image-Line Software FL Studio 5.0.1 allows remote attackers to execute arbitrary code via a .flp file that contains a long path to a 1 .mid or 2 .wav file...

Fedora Core 3 : HelixPlayer-1.0.3-3.fc3 (2005-188)

Updated HelixPlayer packages that fixes two buffer overflow issues are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. A stack based buffer overflow bug was found in HelixPlayer's Synchronized Multimedia Integration Language SMIL...

Slackware 10.0 / 8.1 / 9.0 / 9.1 / current : sox (SSA:2004-223-03)

New sox packages are available for Slackware 8.1, 9.0, 9.1, 10.0, and -current to fix buffer overflow security issues that could allow a malicious WAV file to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

CVE-2005-0611

Heap-based buffer overflow in RealNetworks RealPlayer 10.5 6.0.12.1056 and earlier, 10, 8, and RealOne Player V2 and V1, allows remote attackers to execute arbitrary code via .WAV files...

security flaw

Heap-based buffer overflow in RealNetworks RealPlayer 10.5 6.0.12.1056 and earlier, 10, 8, and RealOne Player V2 and V1, allows remote attackers to execute arbitrary code via .WAV files...

CVE-2001-1418

AOL Instant Messenger AIM 4.7 allows remote attackers to cause a denial of service application crash via a malformed WAV file...

CVE-2001-1418

CVE-2001-1418 affects AOL Instant Messenger (AIM) 4.7, where remote attackers can trigger a denial of service by sending a malformed WAV file. The vulnerability is described with a MEDIUM base score (5.0) and a network attack vector with no authentication required; exploitation details are not pr...

CVE-2001-1418: Undefined Security Weakness

AOL Instant Messenger AIM 4.7 allows remote attackers to cause a denial of service application crash via a malformed WAV file...

SUSE-SA:2005:014: RealPlayer

The remote host is missing the patch for the advisory SUSE-SA:2005:014 RealPlayer. Two security problems were found in the media player RealPlayer: - CVE-2005-0455: A buffer overflow in the handling of .smil files. - CVE-2005-0611: A buffer overflow in the handling of .wav files. Both buffer...

Critical: Red Hat Security Advisory: RealPlayer security update

An updated RealPlayer package that fixes two buffer overflow issues is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. RealPlayer is a media player. A stack based buffer overflow bug was found in RealPlayer's Synchronized...

[VulnWatch] RealOne Player / Real .WAV Heap Overflow File Format Vulnerability

Mark Litchfield of NGSSoftware has discovered a high risk Heap Overflow vulnerability in the .WAV file format when being opened by either of the following products: Windows: RealPlayer 10.5 6.0.12.1056 and below RealPlayer 10 RealOne Player V2 RealOne Player V1 RealPlayer 8 RealPlayer Enterprise...

Real Player media player .smil and .wav files buffer overflow

Stack based overflow on oversized system-screen- size parameter. Heap overflow on .wav files parsing...

CVE-2005-0611

RealNetworks RealPlayer/RealOne Player WAV parsing (LIST chunk) suffers a heap-based buffer overflow that can allow remote code execution via crafted WAV files. Affected: RealPlayer 10.5 (6.0.12.1056 and earlier), RealPlayer 10, 8, RealOne Player V2/V1. Some connected advisories note exploitation...

CVE-2005-0611

Heap-based buffer overflow in RealNetworks RealPlayer 10.5 6.0.12.1056 and earlier, 10, 8, and RealOne Player V2 and V1, allows remote attackers to execute arbitrary code via .WAV files...

CVE-2005-0611: Undefined Security Weakness

Heap-based buffer overflow in RealNetworks RealPlayer 10.5 6.0.12.1056 and earlier, 10, 8, and RealOne Player V2 and V1, allows remote attackers to execute arbitrary code via .WAV files...

CVE-2004-1623

The WAV file property handler in Windows XP SP1 allows remote attackers to cause a denial of service infinite loop in Explorer via a WAV file with an invalid file header whose fmt chunk length is set to 0xFFFFFFFF...

CVE-2004-1623

The CVE-2004-1623 entry concerns the WAV file property handler in Windows XP SP1, where processing a WAV file with an invalid header (fmt chunk length = 0xFFFFFFFF) can cause an infinite loop in Explorer, leading to a denial of service. Public sources confirm the affected software as Windows XP S...