CVE-2019-9766

CVE-2019-9766 Free MP3 CD Ripper 2.6 に存在するバッファオーバーフロー脆弱性を利用し、特別に細工した MP3 ファイルを構築します。攻撃者がプレーヤーで再生すると、おとりのオーディオファイルがバッファオーバーフロー脆弱性を利用して任意のコードを実行します。 再現 攻撃機：kali201903 192.168.198.142 被害機：windows10 21H1 192.168.198.137 被害機に Free MP3 CD Ripper 2.6 をインストールしておきます。kali 機で MSF を使用してリバース接続用のシェルコードを生成します：...

CVE-2019-25571

MediaMonkey 4.1.23 contains a denial of service vulnerability that allows local attackers to crash the application by opening a specially crafted MP3 file containing an excessively long URL string. Attackers can create a malicious MP3 file with a buffer containing 4000 bytes of data appended to a...

EUVD-2016-10076

Malware in sbrugna...

EUVD-2016-6066

Malware in sbrugna...

EUVD-2016-8330

Malware in sbrugna...

EUVD-2017-3164

Malware in sbrugna...

EUVD-2019-8501

Malware in sbrugna...

EUVD-2017-4435

Malware in sbrugna...

EUVD-2016-10077

Malware in sbrugna...

EUVD-2012-6464

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2016-9264

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in the printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service out-of-bounds read via a...

Linux Distros Unpatched Vulnerability : CVE-2016-9265

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a...

Linux Distros Unpatched Vulnerability : CVE-2021-40826

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Clementine Music Player through 1.3.1 is vulnerable to a User Mode Write Access Violation, affecting the MP3 file parsing functionality at clementine+0x3aa207...

CVE-2023-28885

The MyLink infotainment system build 2021.3.26 in General Motors Chevrolet Equinox 2021 vehicles allows attackers to cause a denial of service temporary failure of Media Player functionality via a crafted MP3 file...

DEBIAN-CVE-2023-30207

A divide by zero issue discovered in Kodi Home Theater Software 19.5 and earlier allows attackers to cause a denial of service via use of crafted mp3 file...

UBUNTU-CVE-2023-30207

A divide by zero issue discovered in Kodi Home Theater Software 19.5 and earlier allows attackers to cause a denial of service via use of crafted mp3 file...

Input validation

A divide by zero issue discovered in Kodi Home Theater Software 19.5 and earlier allows attackers to cause a denial of service via use of crafted mp3 file...

CVE-2023-30207

A divide by zero issue discovered in Kodi Home Theater Software 19.5 and earlier allows attackers to cause a denial of service via use of crafted mp3 file...

CVE-2023-30207

A divide by zero issue discovered in Kodi Home Theater Software 19.5 and earlier allows attackers to cause a denial of service via use of crafted mp3 file...

CVE-2023-28885

The MyLink infotainment system build 2021.3.26 in General Motors Chevrolet Equinox 2021 vehicles allows attackers to cause a denial of service temporary failure of Media Player functionality via a crafted MP3 file...