7 matches found
VLC-CVE-2008-4654-Exploit
VLC-CVE-2008-4654-Exploit Bueno, es solo una vulnerabilidad antigua cuyo número CVE es CVE-2008-4654. Esta vulnerabilidad está causada por falta de memoria Out of Memory en la línea 1650 de modules/demux/ty.c. streamReadpdemux-s, mstbuf, 8 + imapsize; Cuando descargué el EXP de otros sitios web,...
VideoLAN VLC Media Player 0.9.4 - TiVo Buffer Overflow (Metasploit)
$Id: videolantivo.rb 11701 2011-02-02 21:47:02Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
VideoLAN VLC TiVo Buffer Overflow
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'VideoLAN VLC TiVo...
CVE-2008-4654
Stack-based buffer overflow in the parsemaster function in the Ty demux plugin modules/demux/ty.c in VLC Media Player 0.9.0 through 0.9.4 allows remote attackers to execute arbitrary code via a TiVo TY media file with a header containing a crafted size value...
VideoLAN VLC TiVo Buffer Overflow
This module exploits a buffer overflow in VideoLAN VLC 0.9.4. By creating a malicious TY file, a remote attacker could overflow a buffer and execute arbitrary code. Module Options msf use exploit/windows/fileformat/videolan/tivo msf undefinedtivo show actions ...actions... msf undefinedtivo set...
CVE-2008-4654
Stack-based buffer overflow in the parsemaster function in the Ty demux plugin modules/demux/ty.c in VLC Media Player 0.9.0 through 0.9.4 allows remote attackers to execute arbitrary code via a TiVo TY media file with a header containing a crafted size value...
CVE-2008-4654
CVE-2008-4654 affects VideoLAN VLC media player (versions 0.9.0–0.9.4) via a stack-based buffer overflow in the Ty TiVo demux parse path (parse_master in ty.c) that can be triggered by a crafted TiVo TY header. The vulnerability allows remote attackers to execute arbitrary code with the privilege...