CoolPlayer 2.17 - '.m3u' Local Stack Overflow

CoolPlayer, Latest Build: 217 Web:: http://coolplayer.sourceforge.net/ Playlist.m3u File Local Buffer Overflow Exploit Vuln: https://www.securityfocus.com/bid/21396 Greetz: Luigi Auriemma que ha descubierto una nueva vulnerabilidad en este software junto a esta vuln que era antigua y que ha sido...

CoolPlayer 2.17 - .m3u Local Stack Overflow

CoolPlayer 2.17 - .m3u Local Stack Overflow CoolPlayer, Latest Build: 217 Web:: http://coolplayer.sourceforge.net/ Playlist.m3u File Local Buffer Overflow Exploit Vuln: https://www.securityfocus.com/bid/21396 Greetz: Luigi Auriemma que ha descubierto una nueva vulnerabilidad en este software junt...

CVE-2007-6609

Multiple stack-based buffer overflows in the CPLIReadTagOGG function in CPIPlaylistItem.c in CoolPlayer 217 and earlier allow user-assisted remote attackers to execute arbitrary code via a long 1 cTag or 2 cValue field in an OGG Vorbis file...

Stack overflow

Multiple stack-based buffer overflows in the CPLIReadTagOGG function in CPIPlaylistItem.c in CoolPlayer 217 and earlier allow user-assisted remote attackers to execute arbitrary code via a long 1 cTag or 2 cValue field in an OGG Vorbis file...

CVE-2007-6609

Multiple stack-based buffer overflows in the CPLIReadTagOGG function in CPIPlaylistItem.c in CoolPlayer 217 and earlier allow user-assisted remote attackers to execute arbitrary code via a long 1 cTag or 2 cValue field in an OGG Vorbis file...

CVE-2007-6609

Summary of CVE-2007-6609 (CPI_PlaylistItem.c, CoolPlayer) : The vulnerability is a chain of stack-based buffer overflows in CPLI_ReadTag_OGG within CPI_PlaylistItem.c affecting CoolPlayer 217 and earlier. A long (cTag or cValue) field in an OGG Vorbis file can allow user-assisted remote code exec...

Buffer-overflow in CoolPlayer 217

Luigi Auriemma Application: CoolPlayer http://coolplayer.sourceforge.net Versions: = 217 Platforms: Windows Bug: buffer-overflow in CPLIReadTagOGG Exploitation: local Date: 28 Dec 2007 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix...

CoolPlayer media player buffer overflow

Buffer overflow on OGG Vorbis parsing...

CoolPlayer 2.17 - CPLI_ReadTag_OGG() Buffer Overflow

CoolPlayer 2.17 - CPLIReadTagOGG Buffer Overflow source: https://www.securityfocus.com/bid/27061/info CoolPlayer is prone a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. The issue occurs when handling specially crafted OGG...

CoolPlayer 2.17 - 'CPLI_ReadTag_OGG()' Buffer Overflow

source: https://www.securityfocus.com/bid/27061/info CoolPlayer is prone a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. The issue occurs when handling specially crafted OGG files. Successfully exploiting this issue allows...

Coolplayer buffer overflows

Multiple buffer overflows...

[Full-disclosure] Coolplayer buffer overflow vulnerabilities

Affected software: Coolplayer coolplayer.sourceforge.net Versions: = 215 Discovered by: Mehdi Oudad and Kevin Fernandez, zone-h.fr The coolplayer authors have been mailed through contact at/ daansystems. com on november 15 2005 but we never got any reply. On november 30 2006 they published a new...

CoolPlayer多个缓冲区溢出漏洞

CoolPlayer是一款媒体播放程序。 CoolPlayer存在多个缓冲区溢出问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 攻击者可以构建恶意的文件，诱使用户打开来触发，可导致以应用程序进程权限执行任意指令。 CoolPlayer CoolPlayer 215 升级程序： CoolPlayer CoolPlayer 215 CoolPlayer CoolPlayer216Bin.zip http://downloads.sourceforge.net/coolplayer/CoolPlayer216Bin.zip 可参考如下测试文件：...

CVE-2006-6288

Multiple buffer overflows in Niek Albers CoolPlayer 216 and earlier allow remote attackers to execute arbitrary code via 1 a playlist file with long song names, because of an overflow in the CPLAddPrefixedFile function in CPIPlaylist.c; 2 a skin file with long button names, because of an overflow...

CVE-2006-6288

CVE-2006-6288 affects CoolPlayer 216 and earlier. The vulnerability consists of multiple buffer overflows in CPL_AddPrefixedFile (playlist names), main_skin_check_ini_value (skin button names), and main_skin_open (skin bitmap filenames) in CPI_Playlist.c and skin.c, allowing remote attackers to e...

CVE-2006-6288

Multiple buffer overflows in Niek Albers CoolPlayer 216 and earlier allow remote attackers to execute arbitrary code via 1 a playlist file with long song names, because of an overflow in the CPLAddPrefixedFile function in CPIPlaylist.c; 2 a skin file with long button names, because of an overflow...