vlc -- stack overflow in MPA, AVI and ASF demuxer

VideoLAN reports: When parsing a MP4, ASF or AVI file with an overly deep box structure, a stack overflow might occur. It would overwrite the return address and thus redirect the execution flow. If successful, a malicious third party could trigger execution of arbitrary code within the context of...

MS09-047: Windows Media Format Multiple Vulnerabilities (Windows XP 32-bit)

Binary data 5165.prm...

MS09-047: Windows Media Format Multiple Vulnerabilities (Windows Vista / Server 2008)

Binary data 5167.prm...

Microsoft Windows Media Format运行时库ASF头无效释放内存破坏漏洞（MS09-047）

BUGTRAQ ID: 36225 CVECAN ID: CVE-2009-2498 Windows Media Format Runtime用于向使用Windows Media内容的应用程序提供信息和工具。 Windows Media Format运行时环境在处理ASF文件头时存在错误，用户受骗打开了特制文件或从网站打开了特制的流内容就会触发对已释放内存的无效调用，导致执行任意指令。 Microsoft Windows Media Services 9.1 Microsoft Windows Media Services 2008 Microsoft Windows Media...

MS09-047: Windows Media Format Multiple Vulnerabilities (Windows 2000)

Binary data 5163.prm...

MS09-047: Windows Media Format Multiple Vulnerabilities (Windows XP 64-bit)

Binary data 5166.prm...

MS09-047: Windows Media Format Multiple Vulnerabilities (Windows Server 2003)

Binary data 5164.prm...

Microsoft Windows Media Format Remote Code Execution Vulnerability (973812)

This host is missing a critical security update according to Microsoft Bulletin MS09-047. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Media formats security vulnerabilities

Uninitialized pointer free on ASF files parsing, memory corruption on MP3 files parsing...

Design/Logic Flaw

Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properly parse malformed headers in Advanced Systems Format ASF files, which allows remote attackers to execute arbitrary code via a crafted 1 .asf, 2 .wmv, or 3 .wma file, aka "Windows Media...

CVE-2009-2498

Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properly parse malformed headers in Advanced Systems Format ASF files, which allows remote attackers to execute arbitrary code via a crafted 1 .asf, 2 .wmv, or 3 .wma file, aka "Windows Media...

CVE-2009-2498

The CVE-2009-2498 entry corresponds to a code-execution vulnerability in Microsoft Windows Media Format Runtime (versions 9.0, 9.5, 11) and Windows Media Services 9.1/2008, triggered by parsing malformed ASF/WMV/WMA headers. Connected advisories (e.g., CPAI-2014-1114; OpenVAS 901012) corroborate ...

CVE-2009-2498

Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properly parse malformed headers in Advanced Systems Format ASF files, which allows remote attackers to execute arbitrary code via a crafted 1 .asf, 2 .wmv, or 3 .wma file, aka "Windows Media...

Microsoft Windows ASF File Media Header Parsing Code Execution (MS09-047; CVE-2009-2498)

ASF Advanced Systems Format is a file format that stores audio and video information and is specially designed to run over networks like the Internet. It is a compressed format that contains streaming audio, video, slide shows, and synchronized events. ASF enables content to be delivered as a...

MS09-047: Vulnerabilities in Windows Media Format Could Allow Remote Code Execution (973812)

The remote Windows host contains a version of the Windows Media Format Runtime or Windows Media Services that is affected by multiple vulnerabilities : - The ASF parser has an invalid free vulnerability. A remote attacker could exploit this by tricking a user into opening a specially crafted ASF...

Microsoft Windows Media Format ASF Header Invalid Free Memory Corruption Vulnerability

Description Microsoft Windows is prone to a remote memory-corruption vulnerability that arises when an affected Windows component handles a malicious ASF file. Successful exploits may allow attackers to execute arbitrary code with the privileges of the currently logged-in user. Failed attacks wil...

PT-2009-4905 · Microsoft · Windows Media Format Runtime +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Media Format Runtime versions 9.0, 9.5, and 11 Windows Media Services versions 9.1 and 2008 Description: The issue arises from the improper parsing of malformed headers in Advanced Systems Format ASF files, which can lead to...

Stack overflow

Stack-based buffer overflow in Streaming Download Project SDP Downloader 2.3.0 allows remote attackers to execute arbitrary code via a long .asf URL in the HREF attribute of a REF element in a .asx file...

CVE-2009-1627

Stack-based buffer overflow in Streaming Download Project SDP Downloader 2.3.0 allows remote attackers to execute arbitrary code via a long .asf URL in the HREF attribute of a REF element in a .asx file...

Mandriva Update for gstreamer0.10-plugins-ugly MDVA-2008:181 (gstreamer0.10-plugins-ugly)

Check for the Version of gstreamer0.10-plugins-ugly OpenVAS Vulnerability Test Mandriva Update for gstreamer0.10-plugins-ugly MDVA-2008:181 gstreamer0.10-plugins-ugly Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free...