CVE-2009-2375

CVE-2009-2375 refers to a stack-based buffer overflow in Photo DVD Maker 8.02 (and possibly earlier versions) that allows remote attackers to execute arbitrary code via a long File_Name parameter inside a .pdm file. The vulnerability is documented in multiple databases and has a high severity in ...

Photo DVD Maker buffer overflow

Buffer overflow on .PDM files parsing...

[Bkis-10-2009] Photo DVD Maker Professional Buffer Overflow Vulnerability

Title : Photo DVD Maker Professional Buffer Overflow Vulnerability 1. General Information Photo DVD Maker Professional is a tool allows you to create entertaining photo slideshows with many file formats supported. Bkis has just detected a vulnerability in the software related to the processing of...

CVE-2009-2225

Stack-based buffer overflow in SureThing CD/DVD Labeler 5.1.616 trial version allows user-assisted remote attackers to execute arbitrary code via a crafted 1 m3u or 2 pls playlist file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informati...

CVE-2009-2225

CVE-2009-2225 refers to a stack-based buffer overflow in SureThing CD/DVD Labeler 5.1.616 (trial) that allows remote code execution via crafted playlist files (1) m3u or (2) pls). The vulnerability description and related sources indicate the overflow occurs in playlist parsing, enabling arbitrar...

CVE-2009-2225

Stack-based buffer overflow in SureThing CD/DVD Labeler 5.1.616 trial version allows user-assisted remote attackers to execute arbitrary code via a crafted 1 m3u or 2 pls playlist file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informati...

KLA10348 ACE vulnerability in SureThing CD/DVD Labeler

Buffer overflow was found in the SureThing CD/DVD Labeler. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed playlist. Original advisories - Related products SureThing-CD-DVD-Labeler CVE list...

Mandriva Update for drakxtools MDKA-2007:102 (drakxtools)

Check for the Version of drakxtools OpenVAS Vulnerability Test Mandriva Update for drakxtools MDKA-2007:102 drakxtools Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

Unfixed XSS vulnerability at www.dvd-moon.com

Security researcher Woo, has submitted on 27/03/2009 a cross-site-scripting XSS vulnerability affecting www.dvd-moon.com, which at the time of submission ranked 4043254 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009. It is currently...

SlySoft Multiple DVD applications memory corruptions

ElbyCDIO.sys driver multiple memory corruptions...

BlazeVideo HDTV Player <= 3.5 PLF Playlist File Remote Overflow Exploit

No description provided by source. !/usr/bin/python Title: BlazeVideo HDTV Player = 3.5 PLF Playlist File Remote Heap Overflow Exploit Summary: BlazeVideo HDTV Player BlazeDTV is a full-featured and easy-to-use HDTV Player software, combining HDTV playback, FM receiving, video record and DVD...

CVE-2009-0243

Microsoft Windows does not properly enforce the Autorun and NoDriveTypeAutoRun registry values, which allows physically proximate attackers to execute arbitrary code by 1 inserting CD-ROM media, 2 inserting DVD media, 3 connecting a USB device, and 4 connecting a Firewire device; 5 allows...

Code injection

Microsoft Windows does not properly enforce the Autorun and NoDriveTypeAutoRun registry values, which allows physically proximate attackers to execute arbitrary code by 1 inserting CD-ROM media, 2 inserting DVD media, 3 connecting a USB device, and 4 connecting a Firewire device; 5 allows...

CVE-2009-0243

Microsoft Windows does not properly enforce the Autorun and NoDriveTypeAutoRun registry values, which allows physically proximate attackers to execute arbitrary code by 1 inserting CD-ROM media, 2 inserting DVD media, 3 connecting a USB device, and 4 connecting a Firewire device; 5 allows...

Nero ShowTime 5.0.15.0 - .m3u Playlist File Remote Buffer Overflow (PoC)

Nero ShowTime 5.0.15.0 - .m3u Playlist File Remote Buffer Overflow PoC !/usr/bin/perl -w Nero ShowTime v5.0.15.0 m3u Playlist File Remote Buffer Overflow PoC Summary: Nero ShowTime provides you with a high-performance software DVD player that takes you to a new dimension in DVD's. Its cinema-like...

GEAR Software CD DVD Filter Driver Insecure Method Local Privilege Escalation

The version of GEAR Software's CD DVD Filter kernel driver GEARAspiWDM.sys on the remote host contains an insecure method that allows a local user to make an unlimited number of calls to 'IoAttachDevice' from user-land, thereby enabling him to exploit a local privilege escalation flaw in the...

豪杰DVD播放器M3U文件处理堆溢出漏洞

BUGTRAQ ID: 31627 豪杰DVD播放器是在中国非常流行使用的多媒体播放器。 豪杰DVD播放器在处理畸形格式的M3U文件时存在漏洞，如果使用豪杰DVD播放器加载了包含有超长项的M3U文件的话，就可能触发堆溢出，导致执行任意指令。 Herosoft Hero DVD Player 3.0.8 Herosoft -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://en.herosoft.com/index.html...

CVE-2008-4504

Heap-based buffer overflow in Mplayer.exe in Herosoft Inc. Hero DVD Player 3.0.8 allows user-assisted remote attackers to execute arbitrary code via an M3u file with a "long entry." NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Heap overflow

Heap-based buffer overflow in Mplayer.exe in Herosoft Inc. Hero DVD Player 3.0.8 allows user-assisted remote attackers to execute arbitrary code via an M3u file with a "long entry." NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-4504

Affected software: Hero DVD Player 3.0.8 (Herosoft Inc.). Vulnerability: heap-based buffer overflow in Mplayer.exe triggered by a long entry in an M3U file. Impact: user-assisted remote attackers may execute arbitrary code. Notes: the description indicates the provenance is from third-party infor...