ZDI-09-007: Apple QuickTime Cinepak Codec MDAT Heap Corruption Vulnerability

ZDI-09-007: Apple QuickTime Cinepak Codec MDAT Heap Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-007 January 21, 2009 -- CVE ID: CVE-2009-2006 -- Affected Vendors: Apple -- Affected Products: Apple Quicktime -- TippingPointTM IPS Customer Protection: TippingPoint IP...

Apple QuickTime Cinepak Codec MDAT Heap Corruption Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The specific flaw exists in the handling of movie data encoded using the...

Ffdshow < rev2347_20081123 Remote Buffer Overflow

ffdshow, a DirectShow filter and VFW codec for multiple audio and video formats, is installed on the remote host. ffdshow is available as a standalone package but is typically bundled with third-party codec software such as K-lite Codec Pack, XP Codec Pack, Vista Codec Package and Codec Pack...

ffdshow codec buffer overflow

Buffer overflow on oversized URI...

K-Lite Mega Codec Pack vsfilter.dll Denial Of Service Vulnerability

This host is installed with K-Lite Mega Codec Pack and is prone to Denial Of Service Vulnerability. OpenVAS Vulnerability Test $Id: gbklitemegacodecdosvuln.nasl 5370 2017-02-20 15:24:26Z cfi $ K-Lite Mega Codec Pack vsfilter.dll Denial Of Service Vulnerability Authors: Veerendra GG Copyright:...

K-Lite Mega Codec Pack vsfilter.dll Denial Of Service Vulnerability

K-Lite Mega Codec Pack is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-5072

vsfilter.dll in K-Lite Mega Codec Pack 3.5.7.0 allows remote attackers to cause a denial of service application crash via a malformed FLV file...

CVE-2008-5072

vsfilter.dll in K-Lite Mega Codec Pack 3.5.7.0 allows remote attackers to cause a denial of service application crash via a malformed FLV file...

CVE-2008-5072

CVE-2008-5072 affects the K-Lite Mega Codec Pack (vsfilter.dll, 3.5.7.0). A malformed FLV file can cause the host application to crash, yielding a Denial of Service. Documents consistently describe a DoS impact via crafted input to vsfilter.dll; no verified exploit details or mitigations are prov...

CVE-2008-5072: Undefined Security Weakness

vsfilter.dll in K-Lite Mega Codec Pack 3.5.7.0 allows remote attackers to cause a denial of service application crash via a malformed FLV file...

Vulnerabilities in DirectX Could Allow Remote Code Execution (951698)

This host has DirectX installed, which is prone to remote code execution vulnerabilities. OpenVAS Vulnerability Test $Id: gbms08-033.nasl 5863 2017-04-05 07:38:11Z antu123 $ Vulnerabilities in DirectX Could Allow Remote Code Execution 951698 Authors: Veerendra GG Updated by Madhuri D on 2010-12-0...

K-Lite Mega Codec Pack 'vsfilter.dll'拒绝服务漏洞

BUGTRAQ ID: 31400 CNCAN ID：CNCAN-2008092605 K-Lite Mega Codec Pack是一款影音格式的解码器。 K-Lite Mega Codec Pack 'vsfilter.dll'库处理媒体文件存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 构建恶意的flv文件，诱使用户访问可触发。 K-Lite Mega Codec Pack 3.5.7.0 目前没有解决方案提供： http://www.codecguide.com/downloadmega.htm 可参考如下测试程序：...

K-Lite Mega Codec Pack 3.5.7.0 Local Windows Explorer DoS PoC

No description provided by source. K-Lite Mega Codec Pack based Local Windows Explorer DOS PoC. Version:3.5.7.0 "vsfilter.dll"Version 1.0.1.4 that comes bundled with the above Codec Pack crashes when we try to use,select or even highlight the attached "Test7.flv" file in Windows Explorer,causing...

Apple QuickTime Multiple Arbitrary Code Execution Vulnerabilities - Windows

Apple QuickTime is prone to multiple arbitrary code execution vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

K-Lite Mega Codec Pack 3.5.7.0 Local Windows Explorer DoS PoC

Exploit for unknown platform in category dos / poc ============================================================= K-Lite Mega Codec Pack 3.5.7.0 Local Windows Explorer DoS PoC ============================================================= K-Lite Mega Codec Pack based Local Windows Explorer DOS PoC...

K-Lite Mega Codec Pack 3.5.7.0 - Local Windows Explorer Denial of Service (PoC)

K-Lite Mega Codec Pack 3.5.7.0 - Local Windows Explorer Denial of Service PoC K-Lite Mega Codec Pack based Local Windows Explorer DOS PoC. Version:3.5.7.0 "vsfilter.dll"Version 1.0.1.4 that comes bundled with the above Codec Pack crashes when we try to use,select or even highlight the attached...

K-Lite Mega Codec Pack 3.5.7.0 - Local Windows Explorer Denial of Service (PoC)

K-Lite Mega Codec Pack based Local Windows Explorer DOS PoC. Version:3.5.7.0 "vsfilter.dll"Version 1.0.1.4 that comes bundled with the above Codec Pack crashes when we try to use,select or even highlight the attached "Test7.flv" file in Windows Explorer,causing Explorer to Crash. Greetz fly out t...

Critical Vulnerability in Apple Quicktime’s Indeo Codec

http://www.ngssoftware.com/advisories/critical-vulnerability-in-apple-quicktimes-indeo-codec/ Paul Byrne of NGSSoftware has discovered a critical vulnerability in Apple Quicktime's implementation of the Indeo Codec CVE-ID: CVE-2008-3615 which may allow an attacker to execute arbitrary code on a...

ZDI-08-057: Apple QuickTime IV32 Codec Parsing Stack Overflow Vulnerability

ZDI-08-057: Apple QuickTime IV32 Codec Parsing Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-057 September 9, 2008 -- CVE ID: CVE-2008-3635 -- Affected Vendors: Apple -- Affected Products: Apple Quicktime -- Vulnerability Details: This vulnerability allows...

CVE-2008-3615

ir5032.qtx in an unspecified third-party Indeo v5 codec for QuickTime, when used with Apple QuickTime before 7.5.5 on Windows, accesses uninitialized memory, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file...