966 matches found
CVE-2006-5567
Multiple heap-based buffer overflows in AOL Nullsoft WinAmp before 5.31 allow user-assisted remote attackers to execute arbitrary code via a crafted 1 ultravox-max-msg header to the Ultravox protocol handler or 2 unspecified Lyrics3 tags...
CVE-2006-5567
AOL Nullsoft Winamp versions prior to 5.31 are vulnerable to multiple heap-based buffer overflows . These flaws exist in the Ultravox protocol handler —specifically involving the ultravox-max-msg header—and within the Lyrics3 tags parsing code. A user-assisted remote attacker can exploit these vu...
CVE-2006-5567
Multiple heap-based buffer overflows in AOL Nullsoft WinAmp before 5.31 allow user-assisted remote attackers to execute arbitrary code via a crafted 1 ultravox-max-msg header to the Ultravox protocol handler or 2 unspecified Lyrics3 tags...
AOL Nullsoft Winamp Lyrics3 heap buffer overflow
Overview AOL Nullsoft Winamp contains a heap-based buffer overflow in the code that handles Lyrics3 tags. This vulnerability may allow a remote, unauthenticated attacker execute arbitrary code on a vulnerable system. Description Lyrics3 is a system for embedding the lyrics inside an MP3 song file...
CVE-2006-5567: Undefined Security Weakness
Multiple heap-based buffer overflows in AOL Nullsoft WinAmp before 5.31 allow user-assisted remote attackers to execute arbitrary code via a crafted 1 ultravox-max-msg header to the Ultravox protocol handler or 2 unspecified Lyrics3 tags...
NullSoft WinAmp Ultravox support multiple security vulnerabilities
Buffer overflows on parsing different tags and headers...
Winamp < 5.31 Multiple Buffer Overflows
The remote host is using Winamp, a popular media player for Windows. The version of Winamp installed on the remote Windows host reportedly contains two overflow flaws, one involving the 'ultravox-max-msg' header used in its support of the Ultravox protocol and the other in its Ultravox Lyrics3...
Nullsoft Winamp Ultravox多个远程堆溢出漏洞
Winamp是一款流行的媒体播放器，支持多种文件格式。 Winamp的Ultravox协议处理器在处理ultravox-max-msg头时存在堆溢出漏洞。恶意的服务器可能导致Winamp客户端分配很小的空间，然后填充大量的服务器数据来触发这个溢出，最终执行任意指令。 Winamp的Ultravox Lyrics3解析代码中也存在堆溢出漏洞。如果解析了某些Lyrics3标签，恶意的服务器可能导致Winamp客户端分配很小的空间，然后填充大量的服务器数据来触发这个溢出，最终执行任意指令。 Nullsoft Winamp 5.3 Nullsoft Winamp 5.24...
iDefense Security Advisory 10.25.06: AOL Nullsoft Winamp Ultravox 'ultravox-max-msg' Header Heap Overflow Vulnerability
AOL Nullsoft Winamp Ultravox 'ultravox-max-msg' Header Heap Overflow Vulnerability iDefense Security Advisory 10.25.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 25, 2006 I. BACKGROUND Ultravox is a streaming media technology developed by AOL for delivering and publishing streaming...
iDefense Security Advisory 10.25.06: AOL Nullsoft Winamp Ultravox Lyrics3 v2.00 tags Heap Overflow Vulnerability
AOL Nullsoft Winamp Ultravox Lyrics3 v2.00 tags Heap Overflow Vulnerability iDefense Security Advisory 10.25.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 25, 2006 I. BACKGROUND Lyrics3 is a system for embedding the lyrics inside an MP3 song file. The Winamp media player has suppor...
Winamp < 5.31 Multiple Heap Overflows
Binary data 3800.prm...
Festalon Heap Corruption
Luigi Auriemma Application: Festalon http://projects.raphnet.net/festalon Versions: = 0.5.5 and = 0.5.0 Platforms: Windows, nix, BSD, Winamp and XMMS plugin Bug: heap corruption in FESTAHESLoad Exploitation: local Date: 06 Aug 2006 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.o...
CVE-2006-3228
Buffer overflow in inmidi.dll for WinAmp 2.90 up to 5.23, including 5.21, allows remote attackers to execute arbitrary code via a crafted .mid MIDI file...
CVE-2006-3228
Buffer overflow in inmidi.dll for WinAmp 2.90 up to 5.23, including 5.21, allows remote attackers to execute arbitrary code via a crafted .mid MIDI file...
CVE-2006-3228
CVE-2006-3228 affects Winamp’s MIDI parsing in the in_midi.dll plugin. A buffer overflow can be triggered by a crafted MIDI file, enabling remote code execution according to NVD and Nessus-derived descriptions. Affected versions include Winamp 2.90 up to 5.23 (including 5.21). Exploitation is ach...
CVE-2006-3228: Undefined Security Weakness
Buffer overflow in inmidi.dll for WinAmp 2.90 up to 5.23, including 5.21, allows remote attackers to execute arbitrary code via a crafted .mid MIDI file...
WinAMP buffer overflow
Buffer overflow on MIDI files playing...
Winamp < 5.24 in_midi.dll MIDI File Processing Overflow
The remote host is using Winamp, a popular media player for Windows. The version of Winamp installed on the remote Windows host reportedly contains a buffer overflow in the MIDI plugin 'inmidi.dll' that can be exploited using a MIDI file with a specially crafted header to crash the affected...
Winamp 5.21 - .Midi File Header Handling Buffer Overflow (PoC)
Winamp 5.21 - .Midi File Header Handling Buffer Overflow PoC / Winamp 5.21 - Midi Buffer Overflow inmidi.dll PoC coded by: BassReFLeX Date: 19 Jun 2006 / include include include void usagechar file; char header = "\x4D\x54\x68\x64\x00\x00" "\x00\x06\x00\x00\x00\x01" "\x00\x60\x4D\x54\x72\x6B"...
Winamp < 5.22 Malformed Midi File Handling Buffer Overflow
The remote host is using Winamp, a popular media player for Windows. The version of Winamp installed on the remote Windows host reportedly contains a buffer overflow in the 'inmidi.dll' library that can be exploited using a specially crafted MIDI file to either crash the affected application or...