BaoFeng Storm Version Detection

This script finds the installed BaoFeng Storm version. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

BaoFeng Storm '.smpl' File Buffer Overflow Vulnerability

This host is installed with BaoFeng Storm and is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: gbbaofengstormsmplbofvuln.nasl 5374 2017-02-20 16:36:11Z cfi $ BaoFeng Storm '.smpl' File Buffer Overflow Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 Greenbone...

CVE-2009-2617

BaoFeng Storm 3.9.62 is affected by a stack-based buffer overflow in medialib.dll that can be triggered by a long pathname in the source attribute of an item element in a .smpl playlist file, allowing remote code execution. The issue is documented under CVE-2009-2617 with a high impact (C:C / I:C...

CVE-2009-2617

Stack-based buffer overflow in medialib.dll in BaoFeng Storm 3.9.62 allows remote attackers to execute arbitrary code via a long pathname in the source attribute of an item element in a .smpl playlist file...

暴风影音（BaoFeng Storm）播放文件缓冲区溢出漏洞

暴风影音是在中国非常流行的万能多媒体播放软件。 暴风影音的medialib.dll库在处理smpl播放列表文件时存在栈溢出漏洞，用户受骗打开了包含有超长路径的播放列表文件就会触发这个溢出，导致执行任意指令。 .text:1000567B ; int stdcall sub1000567BLPCWSTR pszUrl,DWORD pcchPath .text:1000567B sub1000567B proc near ; DATA XREF: .rdata:100248D4 o .text:1000567B .text:1000567B FileName = word ptr -628h...

Baofeng Media Player Stack Overflow

Baofeng Media Player playlist stack overflow vulnerability By Jambalaya of Nevis Labs Date: 2009.06.24 Vender: Baofeng Affected: Storm 3.9.62 Other version may also be affected Overview: Baofeng is a widely popular media player in China, and it plays many common media file formats. There are almo...

Baofeng Media Player buffer overflow

Buffer overflow on SMPL playlists parsing...

Baofeng Media Player playlist stack overflow vulnerability

Baofeng Media Player playlist stack overflow vulnerability By Jambalaya of Nevis Labs Date: 2009.06.24 Vender: Baofeng Affected: Storm 3.9.62 Other version may also be affected Overview: Baofeng is a widely popular media player in China, and it plays many common media file formats. There are almo...

CVE-2009-1807

Unspecified vulnerability in Config.dll in Baofeng products 3.09.04.17 and earlier allows remote attackers to execute arbitrary code by calling the SetAttributeValue method, as exploited in the wild in April and May 2009...

Code injection

Unspecified vulnerability in Config.dll in Baofeng products 3.09.04.17 and earlier allows remote attackers to execute arbitrary code by calling the SetAttributeValue method, as exploited in the wild in April and May 2009...

CVE-2009-1807

Unspecified vulnerability in Config.dll in Baofeng products 3.09.04.17 and earlier allows remote attackers to execute arbitrary code by calling the SetAttributeValue method, as exploited in the wild in April and May 2009...

CVE-2009-1807

CVE-2009-1807 affects Baofeng products containing Config.dll (versions up to 3.09.04.17). The vulnerability allows remote attackers to execute arbitrary code by calling SetAttributeValue, as exploited in the wild in April–May 2009. Descriptions across NVD and related records confirm the issue, bu...

VulnCheck KEV: CVE-2009-1807

Unspecified vulnerability in Config.dll in Baofeng products 3.09.04.17 and earlier allows remote attackers to execute arbitrary code by calling the SetAttributeValue method, as exploited in the wild in April and May 2009...

BaoFeng Storm 3.9.62 - .Playlist File Buffer Overflow (PoC)

BaoFeng Storm 3.9.62 - .Playlist File Buffer Overflow PoC source: https://www.securityfocus.com/bid/35512/info BaoFeng Storm is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to...

BaoFeng Storm 3.9.62 - '.Playlist' File Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/35512/info BaoFeng Storm is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to execute arbitrary code in the context of the application...

BaoFeng (config.dll) ActiveX Remote Code Execution Exploit

No description provided by source. BaoFeng config.dll ActiveX Remote Code Execution Exploit Exploit made by etirah Download: www.baofeng.com Problem DLL : config.dll Problem Func : SetAttributeValueparam1,param2,param3 Problem Param : param1 References: 1...

BaoFeng (config.dll) ActiveX Remote Code Execution Exploit

Exploit for windows platform in category remote exploits ========================================================== BaoFeng config.dll ActiveX Remote Code Execution Exploit ========================================================== BaoFeng config.dll ActiveX Remote Code Execution Exploit Exploit...

BaoFeng - 'config.dll' ActiveX Remote Code Execution

BaoFeng config.dll ActiveX Remote Code Execution Exploit Exploit made by etirah Download: www.baofeng.com Problem DLL : config.dll Problem Func : SetAttributeValueparam1,param2,param3 Problem Param : param1 References: 1. http://forum.eviloctal.com/viewthread.php?tid=35051 2...

BaoFeng Code Execution

BaoFeng config.dll ActiveX Remote Code Execution Exploit Exploit made by etirah Download: www.baofeng.com Problem DLL : config.dll Problem Func : SetAttributeValueparam1,param2,param3 Problem Param : param1 References: 1. http://forum.eviloctal.com/viewthread.php?tid=35051 2...

BaoFeng - config.dll ActiveX Remote Code Execution

BaoFeng - config.dll ActiveX Remote Code Execution BaoFeng config.dll ActiveX Remote Code Execution Exploit Exploit made by etirah Download: www.baofeng.com Problem DLL : config.dll Problem Func : SetAttributeValueparam1,param2,param3 Problem Param : param1 References: 1...