CVE-2017-15955

CVE-2017-15955 affects bchunk (BinChunker) 1.2.0/1.2.1. The issue causes a crash/denial of service when processing malformed CUE (.cue) files, described as an Access violation near NULL on destination operand. Several connected advisories confirm the vulnerability and provide affected versions an...

CVE-2017-15953

bchunk related to BinChunker 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow and crash when processing a malformed CUE .cue file...

CVE-2017-15954

bchunk related to BinChunker 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow with a resultant invalid free and crash when processing a malformed CUE .cue file...

bchunk -- access violation near NULL on destination operand and crash

Mitre reports: bchunk 1.2.0 and 1.2.1 is vulnerable to an "Access violation near NULL on destination operand" and crash when processing a malformed CUE .cue file...

bchunk -- heap-based buffer overflow (with invalid free) and crash

Mitre reports: bchunk 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow with a resultant invalid free and crash when processing a malformed CUE .cue file...

bchunk -- heap-based buffer overflow and crash

Mitre reports: bchunk 1.2.0 and 1.2.1 vulnerable to a heap-based buffer overflow and crash when processing a malformed CUE .cue file...

PT-2017-3185 · Bchunk +1 · Bchunk +1

Name of the Vulnerable Software and Affected Versions: bchunk versions 1.2.0 through 1.2.1 Description: The issue is related to a heap-based buffer overflow that can cause a crash when processing a malformed CUE .cue file. This can be exploited by a remote attacker using a specially crafted file ...

PT-2017-3184 · Bchunk +1 · Bchunk +1

Name of the Vulnerable Software and Affected Versions: bchunk versions 1.2.0 through 1.2.1 Description: The issue is related to a heap-based buffer overflow that can cause a crash when processing a malformed CUE .cue file. This can be exploited by a remote attacker using a specially crafted file,...

PT-2017-3183 · Bchunk +1 · Bchunk +1

Name of the Vulnerable Software and Affected Versions: bchunk versions 1.2.0 through 1.2.1 Description: The issue is related to pointer dereference errors. It can be exploited by a remote attacker using a specially crafted .cue file, potentially causing the application to crash. The problem arise...

UBUNTU-CVE-2017-5665

The spltcueexporttofile function in cue.c in libmp3splt 0.9.2 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted file...

DEBIAN-CVE-2017-5665

The spltcueexporttofile function in cue.c in libmp3splt 0.9.2 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted file...

UltraISO CUE File Parsing Buffer Overflow (CVE-2007-2888)

A stack-based buffer overflow exists in UltraISO. The vulnerability is due to lack of bounds validation which might lead to a buffer overflow. A remote attacker can execute arbitrary code by enticing a victim to open a CUE crafted file...

VUPlayer CUE File Buffer Overflow

A stack overflow exists in VUPlayer. The vulnerability is due to improper boundary checking of user-supplied input when processing CUE files. By enticing a victim to open a malicious CUE file, a remote attacker could execute arbitrary code on the affected system...

Downloads Resources over HTTP

Overview Affected versions of cue-sdk-node insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution...

cue-commerce.net XSS vulnerability

Vulnerable URL: https://www.cue-commerce.net/access/OnlineError.asp?Error=-%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 170828 Googl...

QQPlayer-cue-File-Buffer-Overflow

Title: QQPlayer cue File Buffer Overflow Exploit Author: Lufeng Li of Neusoft Corporation Vendor: www.qq.com Platform: Windows XPSP3 Chinese Simplified head = '''FILE "''' junk = "A" 780 nseh ="\x42\x61\x21\x61" seh ="\xa9\x9e\x41\x00" adjust="\x32\x42\x61\x33\xca\x83\xc0\x10"...

UltraISO CUE File Parsing Buffer Overflow

No description provided by source. $Id: ultraisocue.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Adobe Version Cue 1.0/1.0.1 - Local Root Exploit (OSX)

No description provided by source. !/usr/bin/perl Adobe Version Cue VCNativeOSX: local root exploit. by: vade79/v9 [email protected] fakehalo/realhalo Adobe Version Cue's VCNative program writes data to a log file in the current working directory while running as setuid root. the logfile is formated...

VUPlayer <= 2.49 - (.cue) Universal Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl VUPlayer = 2.49 .cue Universal Buffer Overflow Exploit By Stack Big THnx to Simo-Soft Reference http://www.milw0rm.com/exploits/8138 this exploit work just on Xp SP2 Other exploit http://www.milw0rm.com/related.php?program=VUplayer use strict; use...

Adobe Version Cue 1.0/1.0.1 - (-lib) Local Root Exploit (OSX)

No description provided by source. / Adobe Version Cue VCNativeOSX: local root exploit. dyld by: vade79/v9 [email protected] fakehalo/realhalo Adobe Version Cue's VCNative program allows un-privileged local users to load arbitrary librariesbundles while running setuid root. this is done via the -lib...