Gom Player 2.1.16 Command Execution

""""""""""""""""""""""""""""""""""""""""""""""""""""""""""" """ :::::: :: :: :: :: :: :::: """ """ :: :: :: :: :::::: .. :::: :: """ """ ::::: ::: ::::: :: :: :: :: :: :::: """ """ :: :: :: :: : :: :: :: :: :: :: """ """ :::::: :: :: ::::: :: :::::: :: :: :::: rs.ir """ """ :: """ """ """...

Stack overflow

Stack-based buffer overflow in srt2smi.exe in Gretech Online Movie Player GOM Player 2.1.16.4635 allows remote attackers to cause a denial of service crash or execute arbitrary code via a long string in an SRT file...

CVE-2009-1497

Stack-based buffer overflow in srt2smi.exe in Gretech Online Movie Player GOM Player 2.1.16.4635 allows remote attackers to cause a denial of service crash or execute arbitrary code via a long string in an SRT file...

CVE-2009-1497

CVE-2009-1497 describes a stack-based buffer overflow in srt2smi.exe of Gretech Online Movie Player (GOM Player) 2.1.16.4635. The vulnerability allows remote attackers to crash the application or execute arbitrary code via a long string contained in an SRT subtitle file. The available documents d...

CVE-2009-1497: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in srt2smi.exe in Gretech Online Movie Player GOM Player 2.1.16.4635 allows remote attackers to cause a denial of service crash or execute arbitrary code via a long string in an SRT file...

GOM Player 2.1.16.6134 Subtitle Local Buffer Overflow PoC

No description provided by source. !/usr/local/bin/perl Title : GOM Player Subtitle Buffer Overflow Vulnerabiltity Discovery by : Bui Quang Minh Tested : GOM Player 2.1.16.6134 Reference : Bkis http://security.bkis.vn/?p=501 PoC : Windows XP Silently Crash and Windows Vista, Windows 7. my $buffer...

GOM Player buffer overflow

Buffer overflow on .srt files parsing...

[Bkis-06-2009] GOM Player Subtitle Buffer Overflow Vulnerability

Bkis-06-2009 GOM Player Subtitle Buffer Overflow Vulnerability 1. General Information GOM Player is a popular multimedia player supporting multiple media formats avi, mpeg,…. In March 2009, Bkis has detected a vulnerability in this software. With this vulnerability, users might lose sensible...

GOM Player 2.1.16.6134 - Subtitle Local Buffer Overflow (PoC)

!/usr/local/bin/perl Title : GOM Player Subtitle Buffer Overflow Vulnerabiltity Discovery by : Bui Quang Minh Tested : GOM Player 2.1.16.6134 Reference : Bkis http://security.bkis.vn/?p=501 PoC : Windows XP Silently Crash and Windows Vista, Windows 7. my $buffer = "A" x 10240 x 4; my $filename =...

GOM Player 2.1.16.6134 Subtitle Local Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ========================================================= GOM Player 2.1.16.6134 Subtitle Local Buffer Overflow PoC ========================================================= !/usr/local/bin/perl Title : GOM Player Subtitle Buffer Overflow...

GOM Player 2.1.16.6134 - Subtitle Local Buffer Overflow (PoC)

GOM Player 2.1.16.6134 - Subtitle Local Buffer Overflow PoC !/usr/local/bin/perl Title : GOM Player Subtitle Buffer Overflow Vulnerabiltity Discovery by : Bui Quang Minh Tested : GOM Player 2.1.16.6134 Reference : Bkis http://security.bkis.vn/?p=501 PoC : Windows XP Silently Crash and Windows...

GOM Player Buffer Overflow Proof Of Concept

!/usr/local/bin/perl Title : GOM Player Subtitle Buffer Overflow Vulnerabiltity Discovery by : Bui Quang Minh Tested : GOM Player 2.1.16.6134 Reference : Bkis http://security.bkis.vn/?p=501 PoC : Windows XP Silently Crash and Windows Vista, Windows 7. my $buffer = "A" x 10240 x 4; my $filename =...

CVE-2009-1022

Heap-based buffer overflow in the Preview/ Set Segment function in Gretech GOMlab GOM Encoder 1.0.0.11 and earlier allows user-assisted remote attackers to cause a denial of service memory corruption and application crash or execute arbitrary code via a long text field in a subtitle .srt file...

Heap overflow

Heap-based buffer overflow in the Preview/ Set Segment function in Gretech GOMlab GOM Encoder 1.0.0.11 and earlier allows user-assisted remote attackers to cause a denial of service memory corruption and application crash or execute arbitrary code via a long text field in a subtitle .srt file...

CVE-2009-1022: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the Preview/ Set Segment function in Gretech GOMlab GOM Encoder 1.0.0.11 and earlier allows user-assisted remote attackers to cause a denial of service memory corruption and application crash or execute arbitrary code via a long text field in a subtitle .srt file...

CVE-2009-1022

Gretech GOMlab GOM Encoder 1.0.0.11 and earlier contains a heap-based buffer overflow in the Preview/Set Segment function. A long text field in a subtitle (.srt) file can be used by a user‑assisted attacker to cause memory corruption and a crash (DoS) or to execute arbitrary code. This vulnerabil...

CVE-2009-1022

Heap-based buffer overflow in the Preview/ Set Segment function in Gretech GOMlab GOM Encoder 1.0.0.11 and earlier allows user-assisted remote attackers to cause a denial of service memory corruption and application crash or execute arbitrary code via a long text field in a subtitle .srt file...

GOM Encoder .srt文件解析堆溢出漏洞

BUGTRAQ ID: 34120 GOM Encoder是一款功能强大的视频转换工具。 GOM Encoder在转换内嵌有字幕的视频时没有正确地处理srt格式的字幕文件。当程序处理Preview/Set Segment功能时，如果srt文件包含有超长的文本字段，就会触发堆溢出，导致拒绝服务或执行任意指令。 0 Gretech GOM Encoder Demo = 1.0.0.11 Gretech ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： a href=http://www.gomplayer.com...

[Bkis-04-2009] GOM Encoder Heap-based Buffer Overflow

GOM Encoder Heap-based Buffer Overflow 1. General Information GOM Encoder is a video transcoder that can work with a lot of video formats. One of its functions is embedding subtitles to the video, which means you can see subtitles on the resulting video even if your device doesn't support subtitl...

Gretech GOM Encoder 1.0.0.11 (Subtitle File) Buffer Overflow PoC

No description provided by source. exploit.py Gom Encoder Subtitle File Buffer Overflow PoC by :Encrypt3d.M!nd Orignal Advisory: http://www.securityfocus.com/bid/34120 chars = 'A' 1000000 file = open 'devilinside.srt', 'w' file.write '1\n00:00:00,001 -- 00:00:06,000\n'+chars file.close...