RealPlayer - FLV Parsing Integer Overflow

RealPlayer - FLV Parsing Integer Overflow ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | = 0x7507508 -- crash flvBody2 = "\x00\x00\x09\x00\x00\x00\x20" flv = open'poc.flv', 'wb+' flv.writeflvHeader flv.writeflvBody1 flv.writeHXFLVMETAAMFTYPEMIXEDARRAYValue...

RealPlayer FLV Parsing Integer Overflow

Exploit for windows platform in category dos / poc ======================================= RealPlayer FLV Parsing Integer Overflow ======================================= ======================================= RealPlayer FLV Parsing Integer Overflow ======================================= Title ...

RealPlayer - FLV Parsing Integer Overflow

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | = 0x7507508 -- crash flvBody2 = "\x00\x00\x09\x00\x00\x00\x20" flv = open'poc.flv', 'wb+' flv.writeflvHeader flv.writeflvBody1 flv.writeHXFLVMETAAMFTYPEMIXEDARRAYValue flv.writeflvBody2 flv.close print '- FLV file...

Moovida Media Player version 2.0.0.15 Insecure DLL Hijacking Vulnerability (libc.dll,quserex.dll)

OVERVIEW The Moovida Media Player application is vulnerable to Insecure DLL Hijacking Vulnerability. Similar terms that describe this vulnerability have been come up with Remote Binary Planting, Unsafe Library Loading, and Insecure DLL Loading/Injection/Hijacking/Preloading. 2. PRODUCT...

CVE-2010-3000

Multiple integer overflows in the ParseKnownType function in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allow remote attackers to execute arbitrary code via crafted 1 HXFLVMETAAMFTYPEMIXEDARRAY or 2 HXFLVMETAAMFTYPEARRAY data in an FLV file...

Integer overflow

Multiple integer overflows in the ParseKnownType function in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allow remote attackers to execute arbitrary code via crafted 1 HXFLVMETAAMFTYPEMIXEDARRAY or 2 HXFLVMETAAMFTYPEARRAY data in an FLV file...

CVE-2010-3000

Multiple integer overflows in the ParseKnownType function in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allow remote attackers to execute arbitrary code via crafted 1 HXFLVMETAAMFTYPEMIXEDARRAY or 2 HXFLVMETAAMFTYPEARRAY data in an FLV file...

ZDI-10-167: RealNetworks RealPlayer FLV Parsing Multiple Integer Overflow Vulnerabilities

ZDI-10-167: RealNetworks RealPlayer FLV Parsing Multiple Integer Overflow Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-10-167 August 26, 2010 -- CVE ID: CVE-2010-3000 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: RealNetworks -- Affected Products: RealNetworks...

RealNetworks RealPlayer security vulnerabilities

Memory corruption on FLV and IVR formats parsing...

RealNetworks RealPlayer FLV Parsing Multiple Integer Overflow Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. Authentication is not required to exploit this vulnerability. The specific flaw exists within the module responsible for handling the FLV file format. While parsing the...

Media Player Classic 1.3.2189.0 - iacenc.dll DLL Hijacking

Media Player Classic 1.3.2189.0 - iacenc.dll DLL Hijacking / Mediaplayer Classic 1.3.2189.0 Dll Hijack Exploit By: Encrypt3d.M!nd Date: 25\8\2010 Download: http://mpc-hc.sourceforge.net/ Details: Compile the following code and rename it to iacenc.dll and place file with one of the affected types ...

Mediaplayer Classic 1.3.2189.0 DLL Hijacking Exploit (iacenc.dll)

Exploit for windows platform in category local exploits ================================================================= Mediaplayer Classic 1.3.2189.0 DLL Hijacking Exploit iacenc.dll ================================================================= / Mediaplayer Classic 1.3.2189.0 Dll Hijack...

VUPEN Security Research - Winamp Player FLV Data Processing Multiple Overflow Vulnerabilities

VUPEN Security Research - Winamp Player FLV Data Processing Multiple Overflow Vulnerabilities http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Winamp is a proprietary media player for Windows-based PCs, written by Nullsoft, now a subsidiary of AOL. It is...

CVE-2010-1372

SQL injection vulnerability in the HD FLV Player comhdflvplayer component 1.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

Sql injection

SQL injection vulnerability in the HD FLV Player comhdflvplayer component 1.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CVE-2010-1372

The CVE-2010-1372 issue affects the Joomla! extension HD FLV Player (com_hdflvplayer) version 1.3. The vulnerability is an SQL injection in the index.php id parameter, enabling remote attackers to manipulate the database. CVSS2 base score 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P). No explicit exploit deta...

CVE-2010-1372

SQL injection vulnerability in the HD FLV Player comhdflvplayer component 1.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

Joomla! Component HD FLV Player - id SQL Injection

Joomla! Component HD FLV Player - id SQL Injection source: https://www.securityfocus.com/bid/38401/info The HD FLV Player component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...

Joomla! Component HD FLV Player - 'id' SQL Injection

source: https://www.securityfocus.com/bid/38401/info The HD FLV Player component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Adobe Flash Player FLV Processing Buffer Overflow (CVE-2007-3456)

Adobe Flash Player is a multimedia and application player. Flash Player runs the Sockware Flash SWF files, which contains multimedia content including vector and raster graphics, video, audio, and scripts. Flash Player is made available as a plug-in for a wide range of web browser applications...