Roxio CinePlayer 3.2 - SonicMediaPlayer.dll Remote Buffer Overflow

Roxio CinePlayer 3.2 - SonicMediaPlayer.dll Remote Buffer Overflow Roxio CinePlayer 3.2 SonicMediaPlayer.dll Remote BOF Exploit Roxio CinePlayer 3.2 SonicMediaPlayer.dll Remote BOF Exploit Advisory from secunia 22251 By : Super-cristal Greetings: His0k4, snakespc.com Tested on Windows Xp Sp2...

Roxio CinePlayer 3.2 (SonicMediaPlayer.dll) Remote BOF Exploit

Exploit for windows platform in category remote exploits ============================================================== Roxio CinePlayer 3.2 SonicMediaPlayer.dll Remote BOF Exploit ============================================================== Roxio CinePlayer 3.2 SonicMediaPlayer.dll Remote BOF...

Roxio CinePlayer 3.2 - 'SonicMediaPlayer.dll' Remote Buffer Overflow

Roxio CinePlayer 3.2 SonicMediaPlayer.dll Remote BOF Exploit Roxio CinePlayer 3.2 SonicMediaPlayer.dll Remote BOF Exploit Advisory from secunia 22251 By : Super-cristal Greetings: His0k4, snakespc.com Tested on Windows Xp Sp2 en,with IE7 shellcode =...

Roxio CinePlayer ActiveX Control Buffer Overflow

This module exploits a stack-based buffer overflow in SonicPlayer ActiveX control SonicMediaPlayer.dll 3.0.0.1 installed by Roxio CinePlayer 3.2. By setting an overly long value to 'DiskType', an attacker can overrun a buffer and execute arbitrary code. This module requires Metasploit:...

InterActual Player IAMCE和IAKey控件远程栈溢出漏洞

BUGTRAQ ID: 24919 InterActual是一款DVD播放器。 InterActual播放器的IAMCE（IAMCE.dll）ActiveX控件在处理超过256字节的超长FailURL属性时存在栈溢出漏洞；IAKey（IAKey.dll）ActiveX控件在处理超过900字节的超长URLCode属性时存在另一个栈溢出漏洞，如果用户受骗加载了恶意媒体文件的话，就可能触发这些溢出，导致执行任意指令。 Roxio CinePlayer 3.2 InterActual Technologies InterActual Player 2.60.12.0717 厂商补丁：...

Stack overflow

Multiple stack-based buffer overflows in a InterActual Player 2.60.12.0717 and b Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via a 1 long FailURL attribute in the IAMCE ActiveX Control IAMCE.dll or a 2 long URLCode attribute in the IAKey ActiveX Control IAKey.dll. NOTE:...

CVE-2007-3829

Multiple stack-based buffer overflows in a InterActual Player 2.60.12.0717 and b Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via a 1 long FailURL attribute in the IAMCE ActiveX Control IAMCE.dll or a 2 long URLCode attribute in the IAKey ActiveX Control IAKey.dll. NOTE:...

CVE-2007-3829

The CVE-2007-3829 issue affects InterActual Player and Roxio CinePlayer due to stack-based buffer overflows in ActiveX controls IAKey (IAKEY.dll) and IAMCE (IAMCE.dll). Vendors describe a remote code execution risk when a user is convinced to view specially crafted HTML (e.g., web page or HTML em...

CVE-2007-3829

Multiple stack-based buffer overflows in a InterActual Player 2.60.12.0717 and b Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via a 1 long FailURL attribute in the IAMCE ActiveX Control IAMCE.dll or a 2 long URLCode attribute in the IAKey ActiveX Control IAKey.dll. NOTE:...

KLA10222 ACE vulnerabilities in player

A buffer overflow was found in Player. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via specially designed attributes. Original advisories - Related products InterActual-Player Roxio-CinePlayer CVE list CVE-2007-0348...

Roxio CinePlayer ActiveX buffer overflow

Buffer overflow in SonicDVDDashVRNav.dll...

CVE-2007-1559

Multiple stack-based buffer overflows in SonicDVDDashVRNav.dll in Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via 1 unspecified long property values to SonicMediaPlayer.dll or 2 long arguments to unspecified methods in SonicMediaPlayer.dll...

CVE-2007-1559

Multiple stack-based buffer overflows in SonicDVDDashVRNav.dll in Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via 1 unspecified long property values to SonicMediaPlayer.dll or 2 long arguments to unspecified methods in SonicMediaPlayer.dll...

CVE-2007-1559

CVE-2007-1559 affects Roxio CinePlayer 3.2, involving stack-based buffer overflows in SonicMediaPlayer.dll (and related SonicDVDDashVRNav.dll) that allow remote code execution. The documented vectors involve overly long values in SonicMediaPlayer.dll (DiskType method) or other long arguments to S...

Roxio CinePlayer 3.2 - SonicDVDDashVRNav.dll ActiveX Control Remote Buffer Overflow

Roxio CinePlayer 3.2 - SonicDVDDashVRNav.dll ActiveX Control Remote Buffer Overflow source: https://www.securityfocus.com/bid/23412/info Roxio CinePlayer is prone to a stack-based buffer-overflow vulnerability because it fails to sufficiently check boundaries of user-supplied input before copying...

Roxio CinePlayer 3.2 - 'SonicDVDDashVRNav.dll' ActiveX Control Remote Buffer Overflow

source: https://www.securityfocus.com/bid/23412/info Roxio CinePlayer is prone to a stack-based buffer-overflow vulnerability because it fails to sufficiently check boundaries of user-supplied input before copying it to an insufficiently sized memory buffer. A remote attacker may exploit this iss...

IASystemInfo.DLL ActiveX控件缓冲区溢出漏洞

InterActual Player用于播放DVD等视频的媒体播放程序，CinePlayer也是功能强大的媒体播放程序。 InterActual Player/CinePlayer包含的ActiveX控件存在缓冲区溢出问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题存在于IASystemInfo.dll ActiveX控件处理"ApplicationType"属性存在边界错误，超长的超过260字节的字符串可触发漏洞，可导致以应用程序进程权限执行任意指令。 Roxio CinePlayer 3.2 InterActual Technologies InterActual...

InterActual Player / CinePlayer ActiveX buffer overflow

Buffer overflow in IASystemInfo.dll ActiveX element...

Secunia Research: InterActual Player / CinePlayer IASystemInfo.dll ActiveX Control Buffer Overflow

====================================================================== Secunia Research 21/03/2007 - InterActual Player / CinePlayer - - IASystemInfo.dll ActiveX Control Buffer Overflow - ====================================================================== Table of Contents Affected...

CVE-2007-0348

Stack-based buffer overflow in the IASystemInfo.dll ActiveX control in 1 InterActual Player 2.60.12.0717, 2 Roxio CinePlayer 3.2, 3 WinDVD 7.0.27.172, and possibly other products, allows remote attackers to execute arbitrary code via a long ApplicationType property...