Winamp 5.6存在多个安全漏洞

Bugtraq ID: 48457 Winamp是一款流行的媒体播放器。 Winamp存在多个安全漏洞，允许攻击者执行任意代码或使应用程序崩溃。 -当解析On2 TrueMotion VP6 codec编码的媒体文件时vp6.w5s存在错误，如果构建的FLV媒体文件中"version"字段超过8，可触发内存破坏。 -解析H263视频内容中"CustomWidth"和"CustomHeight"字段时存在错误，构建特制FLV文件可触发内存破坏。 -解压缩帧时nsvdecvp5.dll存在错误，构建特制的NSV文件可触发基于堆的缓冲区溢出。...

CVE-2011-2118

The FLV ASSET Xtra component in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors, related to an "input validation vulnerability."...

Input validation

The FLV ASSET Xtra component in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors, related to an "input validation vulnerability."...

CVE-2011-2118

Adobe Shockwave Player is affected by CVE-2011-2118 due to an input-validation vulnerability in the FLV Asset Xtra component, prior to version 11.6.0.626. This vulnerability enables arbitrary code execution. Multiple connected advisories confirm the issue and reference the targeted Shockwave comp...

CVE-2011-2118: Improper Input Validation

The FLV ASSET Xtra component in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors, related to an "input validation vulnerability."...

PT-2011-3608

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 11.6.0.626 Description The issue is related to an input validation vulnerability in the FLV ASSET Xtra component, allowing attackers to execute arbitrary code via unspecified vectors. Recommendations Fo...

CVE-2010-3637

An unspecified ActiveX control in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 Flash10h.ocx on Windows allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted FLV video...

Memory corruption

An unspecified ActiveX control in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 Flash10h.ocx on Windows allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted FLV video...

CVE-2010-3637

An unspecified ActiveX control in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 Flash10h.ocx on Windows allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted FLV video...

CVE-2010-3637

An unspecified ActiveX control in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 Flash10h.ocx on Windows allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted FLV video...

CVE-2010-3637

CVE-2010-3637 concerns an unspecified ActiveX control in Adobe Flash Player on Windows. The vulnerability allows remote attackers to execute arbitrary code or cause a memory corruption DoS via a crafted FLV video. Affected products include Flash Player before 9.0.289.0 and the Flash10h.ocx compon...

CVE-2010-3637: Improper Restriction of Operations within the Bounds of a Memory Buffer

An unspecified ActiveX control in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 Flash10h.ocx on Windows allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted FLV video...

PT-2010-4977

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 9.0.289.0 Adobe Flash Player versions 10.x prior to 10.1.102.64 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted FL...

RealPlayer FLV Parsing Integer Overflow

Exploit for windows platform in category dos / poc ======================================= RealPlayer FLV Parsing Integer Overflow ======================================= ======================================= RealPlayer FLV Parsing Integer Overflow ======================================= Title ...

RealNetworks RealPlayer FLV Parsing Multiple Integer Overflows (CVE-2010-3000)

RealPlayer is a media player application developed by RealNetworks Inc. This application is capable of playing back numerous multimedia file formats and can open media files from local file system or network servers. RealPlayer has an extensible nature that allows it to handle different media fil...

RealPlayer - FLV Parsing Integer Overflow

RealPlayer - FLV Parsing Integer Overflow ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | = 0x7507508 -- crash flvBody2 = "\x00\x00\x09\x00\x00\x00\x20" flv = open'poc.flv', 'wb+' flv.writeflvHeader flv.writeflvBody1 flv.writeHXFLVMETAAMFTYPEMIXEDARRAYValue...

RealPlayer - FLV Parsing Integer Overflow

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | = 0x7507508 -- crash flvBody2 = "\x00\x00\x09\x00\x00\x00\x20" flv = open'poc.flv', 'wb+' flv.writeflvHeader flv.writeflvBody1 flv.writeHXFLVMETAAMFTYPEMIXEDARRAYValue flv.writeflvBody2 flv.close print '- FLV file...

Moovida Media Player version 2.0.0.15 Insecure DLL Hijacking Vulnerability (libc.dll,quserex.dll)

OVERVIEW The Moovida Media Player application is vulnerable to Insecure DLL Hijacking Vulnerability. Similar terms that describe this vulnerability have been come up with Remote Binary Planting, Unsafe Library Loading, and Insecure DLL Loading/Injection/Hijacking/Preloading. 2. PRODUCT...

CVE-2010-3000

Multiple integer overflows in the ParseKnownType function in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allow remote attackers to execute arbitrary code via crafted 1 HXFLVMETAAMFTYPEMIXEDARRAY or 2 HXFLVMETAAMFTYPEARRAY data in an FLV file...

Integer overflow

Multiple integer overflows in the ParseKnownType function in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allow remote attackers to execute arbitrary code via crafted 1 HXFLVMETAAMFTYPEMIXEDARRAY or 2 HXFLVMETAAMFTYPEARRAY data in an FLV file...