EUVD-2007-5199

Malware in sbrugna...

CyberLink PowerDVD PlayList File Handling Stack Overflow

CyberLink PowerDVD is a commercial video and audio player for Microsoft Windows and Linux. It enables viewing High-definition video and DVD-Video movies on the user's PC. The player can also be used to play videos and audio/music files in other formats encoded with different codecs, for instance...

KLA10132 DoS vulnerability in Cyberlink PowerDVD

A buffer overflow was found in Cyberlink PowerDVD. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed playlist. Original advisories Blog post Related products Cyberlink-PowerDVD CVE list Solution Upda...

powerdvd_bof.pl.txt

!/usr/bin/perl CyberLink PowerDVD ./evillist.m3u"; or .pls print m3u "$buffer"; print "\n-- Evil Playlist created... Have fun!\n"; July, 2008...

CyberLink PowerDVD <= 8.0 Crafted PLS/M3U Playlist File BoF Vulnerability

Summary CyberLink PowerDVD is a commercial media player for Microsoft Windows and Linux. Several editions of the software are sold including "Ultra", "Deluxe" and "Standard". All editions support the viewing of DVD but only the Ultra edition supports Blu-ray playback. Description PowerDVD is pron...

CVE-2007-5219

Directory traversal vulnerability in the CLAVSetting.CLSetting.1 ActiveX control in CLAVSetting.DLL 1.00.1829 in the CLAVSetting module in CyberLink PowerDVD 7.0 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the argument to the CreateNewFile method...

Directory traversal

Directory traversal vulnerability in the CLAVSetting.CLSetting.1 ActiveX control in CLAVSetting.DLL 1.00.1829 in the CLAVSetting module in CyberLink PowerDVD 7.0 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the argument to the CreateNewFile method...

CVE-2007-5219

The CVE-2007-5219 issue affects CyberLink PowerDVD 7.0 via the CLAVSetting.DLL 1.00.1829 CLAVSetting.CLSetting.1 ActiveX control. The vulnerability is a directory traversal in CreateNewFile that allows remote attackers to create or overwrite arbitrary files by supplying a .. sequence in the argum...

CVE-2007-5219

Directory traversal vulnerability in the CLAVSetting.CLSetting.1 ActiveX control in CLAVSetting.DLL 1.00.1829 in the CLAVSetting module in CyberLink PowerDVD 7.0 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the argument to the CreateNewFile method...

CyberLink PowerDVD CreateNewFile Arbitrary Remote Rewrite DoS

No description provided by source. !-- CyberLink PowerDVD CLAVSetting Module CLAVSetting.DLL 1.00.1829 arbitrary remote rewrite dos this is installed by default on Acer Travelmate series allows to overwrite files with an empty one extension doesn't matter object safety report: RegKey Safe for...

cyberlink-dos.txt

CLSetting.CreateNewFile "................\boot.ini"...

CyberLink PowerDVD CreateNewFile Arbitrary Remote Rewrite DoS

Exploit for unknown platform in category dos / poc ============================================================= CyberLink PowerDVD CreateNewFile Arbitrary Remote Rewrite DoS ============================================================= CLSetting.CreateNewFile "................\boot.ini"...

CyberLink PowerDVD - CreateNewFile Remote Rewrite Denial of Service

CyberLink PowerDVD - CreateNewFile Remote Rewrite Denial of Service CLSetting.CreateNewFile "................\boot.ini" milw0rm.com 2007-10-01...

CyberLink PowerDVD - CreateNewFile Remote Rewrite Denial of Service

CLSetting.CreateNewFile "................\boot.ini" milw0rm.com 2007-10-01...