CVE-2014-3442

Winamp

CVE-2014-3442

Winamp 5.666 and earlier allows remote attackers to cause a denial of service memory corruption and crash via a malformed .FLV file, related to f263.w5s...

KLA10019 DoS vulnerability in Winamp

An unspecified vulnerability was found in Winamp. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited from the network at a point related to Winamp F263 Decoder Service via a malformed .FLV file. Original advisories NVD Related product...

Winamp - .flv File Processing Memory Corruption

Winamp - .flv File Processing Memory Corruption source: https://www.securityfocus.com/bid/67429/info Winamp is prone to a memory-corruption vulnerability. An attacker can leverage this issue to crash the affected application, causing a denial-of-service condition. Winamp 5.666 is vulnerable; othe...

WinAMP 5.666 Memory Corruption

Exploit Title: Winamp memory corruption in latest Version v5.666 build 3516 x86 Date: 2014/05/13 Exploit Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage: www.winamp.com Software Link:...

Winamp - '.flv' File Processing Memory Corruption

source: https://www.securityfocus.com/bid/67429/info Winamp is prone to a memory-corruption vulnerability. An attacker can leverage this issue to crash the affected application, causing a denial-of-service condition. Winamp 5.666 is vulnerable; other versions may also be affected. data...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in jwplayer.swf in the smart-flv plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 link or 2 playerready parameter...

CVE-2013-1765

CVE-2013-1765 affects the WordPress Smart Flv plugin due to XSS in jwplayer.swf. The vulnerability allows remote attackers to inject arbitrary script via the (1) link or (2) playerready parameter of jwplayer.swf used by the plugin. Public references describe multiple XSS vectors and indicate expl...

CVE-2013-1765

Multiple cross-site scripting XSS vulnerabilities in jwplayer.swf in the smart-flv plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 link or 2 playerready parameter...

[VideoCacheView] Play offline/Save .flv video files from Web browser cache

After watching a video in a Web site, you may want to save the video file into your local disk for playing it offline in the future. If the video file is stored in your browser's cache, this utility can help you to extract the video file from the cache and save it for watching it in the future. I...

flv-player 3.5 Cross Site Scripting / Content Spoofing

Hello list! These are Cross-Site Scripting and Content Spoofing vulnerabilities in flv-player. ------------------------- Affected products: ------------------------- Vulnerable are flv-player 3.5 and previous versions. ------------------------- Affected vendors: ------------------------- U-Studio...

(Pwn2Own) Oracle Java FLV Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of FLV...

Dotclear 2.4.4 Cross Site Scripting / Content Spoofing

Hello list! These are Cross-Site Scripting and Content Spoofing vulnerabilities in Dotclear. CMS Dotclear has three vulnerable flash-files: swfupload.swf, playerflv.swf and playermp3.swf. File swfupload.swf it's Swfupload. I've wrote about vulnerabilities in Swfupload in November 2012...

Adobe Flash Player malformed FLV file Flash memory corruption vulnerability (APSB13-05; CVE-2013-0638)

A memory corruption vulneriability has been reprted in Adobe Flash Player. the vulnerability is due to an error while handling specially crafted FLV files. A remote attacker could exploit this vulnerability by enticing a user to open an HTML document containing an embedded malformed FLV file with...

WordPress Plugin Smart Flv - jwplayer.swf Multiple Cross-Site Scripting Vulnerabilities

WordPress Plugin Smart Flv - jwplayer.swf Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/58135/info The Smart Flv plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An...

WordPress Smart Flv Plugin - Multiple Cross Site Scripting Vulnerabilities

Smart Flv plugin is prone to multiple cross-site scripting vulnerabilities because of failure to properly clean up user-supplied input. It allows an attacker to execute arbitrary script code in the browser of an user in the context of the affected site. Other attacks are also possible. Solution...

WordPress Plugin Smart Flv - 'jwplayer.swf' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/58135/info The Smart Flv plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

WordPress Ripe HD FLV Player SQL Injection / Path Disclosure

------------------------------------------------------------------- Wordpress plugins - ripe-hd-player FD/SQL Injection Vulnerability ------------------------------------------------------------------- Vendor: http://www.hitasoft.com/products.php Author = Zikou-16 E-mail = [email protected]...

WordPress Ripe HD FLV Player Plugin - SQL Injection

WordPress Ripe HD FLV Player plugin is prone to an SQL injection vulnerability. It allows an attacker to get access to the database, get username, password and disclosure the full path. Solution Update the plugin...

Wordpress plugin Ripe HD FLV Player SQL Injection Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------- Wordpress plugins - ripe-hd-player FD/SQL Injection Vulnerability ------------------------------------------------------------------- Vendor:...