EUVD-2009-0454

Malware in sbrugna...

EUVD-2012-6580

Malware in sbrugna...

CVE-2012-10031

BlazeVideo HDTV Player Pro v6.6.0.3 is vulnerable to a stack-based buffer overflow due to improper handling of user-supplied input embedded in .plf playlist files. When parsing a crafted .plf file, the MediaPlayerCtrl.dll component invokes PathFindFileNameA to extract a filename from a URL-like...

CVE-2012-10031 BlazeVideo HDTV Player Pro 6.6.0.3 Filename Handling Buffer Overflow

BlazeVideo HDTV Player Pro v6.6.0.3 is vulnerable to a stack-based buffer overflow due to improper handling of user-supplied input embedded in .plf playlist files. When parsing a crafted .plf file, the MediaPlayerCtrl.dll component invokes PathFindFileNameA to extract a filename from a URL-like...

CVE-2012-10031 BlazeVideo HDTV Player Pro 6.6.0.3 Filename Handling Buffer Overflow

BlazeVideo HDTV Player Pro v6.6.0.3 is vulnerable to a stack-based buffer overflow due to improper handling of user-supplied input embedded in .plf playlist files. When parsing a crafted .plf file, the MediaPlayerCtrl.dll component invokes PathFindFileNameA to extract a filename from a URL-like...

CVE-2012-10031

BlazeVideo HDTV Player Pro 6.6.0.3 is affected by a stack-based buffer overflow in .plf playlist handling. The MediaPlayerCtrl.dll uses PathFindFileNameA() to extract a filename from a URL-like string and copies it into a fixed-size stack buffer with strcpy without bounds checking, enabling poten...

BlazeVideo HDTV Player Pro 安全漏洞

BlazeVideo HDTV Player Pro is a video player from BlazeVideo USA. A security vulnerability exists in BlazeVideo HDTV Player Pro version v6.6.0.3, which originates from improper handling of .plf file inputs and can lead to a buffer overflow and arbitrary code execution...

Xinfire TV Player 6.0.1.2 Buffer Overflow Exploit

This Metasploit module exploits a buffer overflow in Xinfire TV Player Pro and Standard version 6.0.1.2. When the application is used to import a specially crafted plf file, a buffer overflow occurs allowing arbitrary code execution. Tested successfully on Win7, Win10. This software is similar as...

Xinfire TV Player 6.0.1.2 Buffer Overflow

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Xinfire TV Player Buffer Overflow', 'Description' = %q This module exploits a buffer overflow in Xinfire TV Player Pro and Standard v6.0.1.2.When...

BlazeVideo-HDTV-Player-multi

Take a look at mona.py : awesome tool developed by corelanc0d3r and his team: https://www.corelan.be/index.php/2011/07/14/mona-py-the-manual/ this is the old fashioned bug, i just try to make it universal : it has also been exploited by: import struct file = 'blazevideo-universal.plf' totalsize =...

BlazeVideo-HDTV-Player-6.6

Exploit Title: BlazeVideo HDTV Player 6.6 Professional Direct Retn Date: 11-25-2012 Exploit Author: Nezim @nezimlufni Vendor Homepage: http://www.blazevideo.com/ Version: BlazeVideo HDTV Player 6.6 Professional filename="video.PLF" junk = "http://"+"\x90"253 junk +="\x33\xBF\x96\x7C" junk +="\x90...

BlazeDVD Pro 7.0 - (.plf) Stack Based Buffer Overflow (Direct RET)

Exploit for windows platform in category local exploits BlazeDVD Pro v7.0 - .plf Stack Based Buffer Overflow direct RET - ALSR/DEP bypass on Win8.1 Pro Date: Mon, Aug 11 2014 12:58:06 GMT Exploit Author: Giovanni Bartolomucci Vendor Homepage: http://www.blazevideo.com/ Software Link:...

BlazeVideo HDTV Player <= 3.5 PLF Playlist File Remote Overflow Exploit

No description provided by source. !/usr/bin/python Title: BlazeVideo HDTV Player = 3.5 PLF Playlist File Remote Heap Overflow Exploit Summary: BlazeVideo HDTV Player BlazeDTV is a full-featured and easy-to-use HDTV Player software, combining HDTV playback, FM receiving, video record and DVD...

BlazeVideo HDTV Player 6.6 Professional (Direct Retn)

No description provided by source. Exploit Title: BlazeVideo HDTV Player 6.6 Professional Direct Retn Date: 11-25-2012 Exploit Author: Nezim @nezimlufni Vendor Homepage: http://www.blazevideo.com/ Version: BlazeVideo HDTV Player 6.6 Professional Tested on: Windows XP SP3 Reference :...

BlazeVideo HDTV Player 6.6 Professional - SEH&DEP&ASLR

No description provided by source. !/usr/bin/python -w ----------------------------------------------------------------------------------- Exploit: BlazeVideo HDTV Player 6.6 Professional SEH&DEP&ASLR Author: b33f - http://www.fuzzysecurity.com/ OS: Tested on Windows 7 32-bit PRO SP1 Software Lin...

BlazeVideo HDTV Player Pro 6.6 - Filename Handling Vulnerability

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

BlazeVideo HDTV Player 3.5 PLF File Stack Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30442/info BlazeVideo HDTV Player is prone to a stack-based buffer-overflow vulnerability because the application fails to handle malformed playlist files. An attacker can exploit this issue to execute arbitrary code with...

BlazeDVD 6.2 (.plf) - Buffer Overflow (SEH) Exploit

Exploit for windows platform in category local exploits !/usr/bin/perl Exploit Title: BlazeDVD 6.2 .plf Buffer Overflow SEH Date: 10-28-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: BlazeDVD 6.2 Software Link:...

BlazeVideo HDTV Player 6.6.0.2 Buffer Overflow

Exploit Title:BlazeVideo HDTV Player Standard 6.6.0.2 SEH Buffer Overflow Date: 19-03-2013 Exploit Author: metacom RST Vendor Homepage: http://www.blazevideo.com/hdtv-player/ Download version 6.6.0.2: www.blazevideo.com/download.php?product=blazevideo-hdtv-std Version: BlazeVideo HDTV Player...

BlazeVideo HDTV Standard v.6.6.0.2 SEH Buffer Overflow

Exploit for windows platform in category dos / poc Exploit Title:BlazeVideo HDTV Player Standard 6.6.0.2 SEH Buffer Overflow Date: 19-03-2013 Exploit Author: metacom RST Vendor Homepage: http://www.blazevideo.com/hdtv-player/ Download version 6.6.0.2:...