Lucene search
+L

1347 matches found

seebug.org
seebug.org
added 2010/02/25 12:00 a.m.45 views

Microsoft DirectX DirectShow AVI文件解析堆溢出漏洞(MS10-013)

BUGTRAQ ID: 38112 CVE ID: CVE-2010-0250 Microsoft DirectX是Windows操作系统中的一项功能,流媒体在玩游戏或观看视频时通过这个功能支持图形和声音。 DirectX的DirectShow组件(quartz.dll)在解析AVI文件中的特定类型视频流时没有正确的使用分配所用的长度字段,导致分配了不充分的缓冲区。用户打开特制的AVI文件就可以触发堆溢出,导致执行任意代码。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2...

9.3CVSS2.3AI score0.31862EPSS
SaveExploits1
Packet Storm
Packet Storm
added 2010/02/23 12:00 a.m.28 views

Media Player Classic 6.4.9.1 Buffer Overflow

!/usr/bin/perl Media Player Classic 6.4.9.1 .avi Buffer Overflow Exploit Homepage: http://www.sourceforge.net/projects/guliverkli2/ Exploit Coded by: cr4wl3r From: Indonesia WARNING - WARNING - WARNING - WARNING Disclaimer: The author published the information under the condition that is not in t...

0.7AI score
SaveExploits0
seebug.org
seebug.org
added 2010/02/23 12:00 a.m.26 views

Media Player Classic v6.4.9.1 (.avi) Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl Media Player Classic 6.4.9.1 .avi Buffer Overflow Exploit Homepage: http://www.sourceforge.net/projects/guliverkli2/ Exploit Coded by: cr4wl3r cr4wl3r\x40linuxmail\x2Eorg From: Indonesia WARNING - WARNING - WARNING - WARNING Disclaimer: The author...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2010/02/22 12:00 a.m.42 views

Media Player Classic 6.4.9.1 - '.avi' Buffer Overflow

!/usr/bin/perl Media Player Classic 6.4.9.1 .avi Buffer Overflow Exploit Homepage: http://www.sourceforge.net/projects/guliverkli2/ Exploit Coded by: cr4wl3r From: Indonesia WARNING - WARNING - WARNING - WARNING Disclaimer: The author published the information under the condition that is not in t...

5.8AI score
SaveExploits0
seebug.org
seebug.org
added 2010/02/20 12:00 a.m.67 views

FFmpeg多个媒体文件解析拒绝服务和代码执行漏洞

BUGTRAQ ID: 36465 CVE ID: CVE-2009-4631,CVE-2009-4632,CVE-2009-4633,CVE-2009-4634,CVE-2009-4635,CVE-2009-4636,CVE-2009-4637,CVE-2009-4638,CVE-2009-4639,CVE-2009-4640 FFmpeg是一套对音频和视频进行解码录制转换的完整方案。 ffmpeg解析各种媒体文件时存在多个空指针引用、内存越界或死循环等漏洞,可能导致拒绝服务或执行任意代码。 1 解析AVI、.ogv和.wmv文件时的空指针引用和0除数错误可能导致崩溃。 2...

10CVSS0.5AI score0.17038EPSS
SaveExploits12
NVD
NVD
added 2010/02/10 6:30 p.m.41 views

CVE-2010-0250

Heap-based buffer overflow in DirectShow in Microsoft DirectX, as used in the AVI Filter on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2, and in Quartz on Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server...

9.3CVSS7.9AI score0.31862EPSS
SaveExploits1References8
Prion
Prion
added 2010/02/10 6:30 p.m.25 views

Heap overflow

Heap-based buffer overflow in DirectShow in Microsoft DirectX, as used in the AVI Filter on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2, and in Quartz on Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server...

9.3CVSS8.6AI score0.31862EPSS
SaveExploits1References8Affected Software3
Cvelist
Cvelist
added 2010/02/10 6:00 p.m.52 views

CVE-2010-0250

Heap-based buffer overflow in DirectShow in Microsoft DirectX, as used in the AVI Filter on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2, and in Quartz on Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server...

7.8AI score0.31862EPSS
SaveExploits1References8
CVE
CVE
added 2010/02/10 6:00 p.m.89 views

CVE-2010-0250

CVE-2010-0250 is a DirectShow/Quartz heap overflow vulnerability in Microsoft DirectX where the AVI/QUartz AVI parser misallocates a buffer when processing a crafted AVI file’s length field, enabling remote code execution. Affected components include DirectShow (AVI Filter) and Quartz, with impac...

9.3CVSS7.9AI score0.31862EPSS
SaveExploits1References8Affected Software4
Prion
Prion
added 2010/02/10 2:30 a.m.18 views

Design/Logic Flaw

The avrescalernd function in the AVI demuxer in FFmpeg 0.5 allows remote attackers to cause a denial of service crash via a crafted AVI file that triggers a divide-by-zero error...

4.3CVSS6.5AI score0.03004EPSS
SaveExploits2References14Affected Software1
NVD
NVD
added 2010/02/10 2:30 a.m.16 views

CVE-2009-4639

The avrescalernd function in the AVI demuxer in FFmpeg 0.5 allows remote attackers to cause a denial of service crash via a crafted AVI file that triggers a divide-by-zero error...

4.3CVSS6.3AI score0.03004EPSS
SaveExploits2References14
OSV
OSV
added 2010/02/10 2:30 a.m.8 views

CVE-2009-4639

The avrescalernd function in the AVI demuxer in FFmpeg 0.5 allows remote attackers to cause a denial of service crash via a crafted AVI file that triggers a divide-by-zero error...

6.2AI score
SaveExploits0References14
Cvelist
Cvelist
added 2010/02/10 2:00 a.m.35 views

CVE-2009-4639

The avrescalernd function in the AVI demuxer in FFmpeg 0.5 allows remote attackers to cause a denial of service crash via a crafted AVI file that triggers a divide-by-zero error...

8.8AI score0.03004EPSS
SaveExploits2References14
Debian CVE
Debian CVE
added 2010/02/10 2:00 a.m.43 views

CVE-2009-4639

The avrescalernd function in the AVI demuxer in FFmpeg 0.5 allows remote attackers to cause a denial of service crash via a crafted AVI file that triggers a divide-by-zero error...

4.3CVSS9AI score0.03004EPSS
SaveExploits2
CVE
CVE
added 2010/02/10 2:00 a.m.75 views

CVE-2009-4639

CVE-2009-4639 relates to FFmpeg 0.5 and its AVI demuxer where the av_rescale_rnd function can trigger a divide-by-zero when processing a crafted AVI file, leading to a denial of service (crash). The connected records (Mandriva MDVSA-2011:112, OpenVAS/Nessus entries) confirm FFmpeg 0.5 vulnerabili...

4.3CVSS8.7AI score0.03004EPSS
SaveExploits2References14Affected Software1
securityvulns
securityvulns
added 2010/02/10 12:00 a.m.59 views

Microsoft DirectShow buffer overflow

Buffer overflow on AVI parsing...

9.3CVSS5AI score0.31862EPSS
SaveExploits1References2Affected Software1
OpenVAS
OpenVAS
added 2010/02/10 12:00 a.m.40 views

Microsoft DirectShow Remote Code Execution Vulnerability (977935)

This host is missing a critical security update according to Microsoft Bulletin MS10-013. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

9.3CVSS5AI score0.31862EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2010/02/09 12:00 a.m.27 views

CVE-2009-4639

The avrescalernd function in the AVI demuxer in FFmpeg 0.5 allows remote attackers to cause a denial of service crash via a crafted AVI file that triggers a divide-by-zero error...

4.3CVSS7.2AI score0.03004EPSS
SaveExploits2References2
Zero Day Initiative
Zero Day Initiative
added 2010/02/09 12:00 a.m.35 views

Microsoft Windows RLE Video Decompressor Remote Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on applications that utilize DirectShow for rendering video on Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must be coerced into decompressing a malicious video. The specific flaw...

10CVSS3.5AI score0.31862EPSS
SaveExploits1References1
Microsoft KB
Microsoft KB
added 2010/02/09 12:00 a.m.42 views

MS10-013: Description of the security update for Quartz: February 9, 2010

None None...

6.1AI score
SaveExploits0
Rows per page
Query Builder