Buffer overflow

Buffer overflow in Hero Super Player 3000 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long filename in a .M3U file. NOTE: this might be related to CVE-2008-4504...

CVE-2008-7162

Buffer overflow in Hero Super Player 3000 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long filename in a .M3U file. NOTE: this might be related to CVE-2008-4504...

CVE-2008-7162

CVE-2008-7162 describes a buffer overflow in Hero Super Player 3000 (Hero DVD Player 3.0.x family) that can be triggered by a long filename in an M3U playlist, allowing remote attackers to crash the application and potentially execute arbitrary code. The note indicates a possible relation to CVE-...

豪杰DVD播放器M3U文件处理堆溢出漏洞

BUGTRAQ ID: 31627 豪杰DVD播放器是在中国非常流行使用的多媒体播放器。 豪杰DVD播放器在处理畸形格式的M3U文件时存在漏洞，如果使用豪杰DVD播放器加载了包含有超长项的M3U文件的话，就可能触发堆溢出，导致执行任意指令。 Herosoft Hero DVD Player 3.0.8 Herosoft -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://en.herosoft.com/index.html...

CVE-2008-4504

Heap-based buffer overflow in Mplayer.exe in Herosoft Inc. Hero DVD Player 3.0.8 allows user-assisted remote attackers to execute arbitrary code via an M3u file with a "long entry." NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Heap overflow

Heap-based buffer overflow in Mplayer.exe in Herosoft Inc. Hero DVD Player 3.0.8 allows user-assisted remote attackers to execute arbitrary code via an M3u file with a "long entry." NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-4504

Affected software: Hero DVD Player 3.0.8 (Herosoft Inc.). Vulnerability: heap-based buffer overflow in Mplayer.exe triggered by a long entry in an M3U file. Impact: user-assisted remote attackers may execute arbitrary code. Notes: the description indicates the provenance is from third-party infor...

Unfixed XSS vulnerability at www.hero-fight.com

Security researcher PaPPy, has submitted on 08/11/2008 a cross-site-scripting XSS vulnerability affecting www.hero-fight.com, which at the time of submission ranked 5527465 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is...