豪杰DVD播放器M3U文件处理堆溢出漏洞

BUGTRAQ ID: 31627 豪杰DVD播放器是在中国非常流行使用的多媒体播放器。 豪杰DVD播放器在处理畸形格式的M3U文件时存在漏洞，如果使用豪杰DVD播放器加载了包含有超长项的M3U文件的话，就可能触发堆溢出，导致执行任意指令。 Herosoft Hero DVD Player 3.0.8 Herosoft -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://en.herosoft.com/index.html...

Heap overflow

Heap-based buffer overflow in Mplayer.exe in Herosoft Inc. Hero DVD Player 3.0.8 allows user-assisted remote attackers to execute arbitrary code via an M3u file with a "long entry." NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-4504

Affected software: Hero DVD Player 3.0.8 (Herosoft Inc.). Vulnerability: heap-based buffer overflow in Mplayer.exe triggered by a long entry in an M3U file. Impact: user-assisted remote attackers may execute arbitrary code. Notes: the description indicates the provenance is from third-party infor...

CVE-2008-4470

Stack-based buffer overflow in Numark CUE 5.0 rev2 allows user-assisted attackers to cause a denial of service application crash or execute arbitrary code via an M3U playlist file that contains a long absolute pathname...

Stack overflow

Stack-based buffer overflow in Numark CUE 5.0 rev2 allows user-assisted attackers to cause a denial of service application crash or execute arbitrary code via an M3U playlist file that contains a long absolute pathname...

CVE-2008-4470

Stack-based buffer overflow in Numark CUE 5.0 rev2 allows user-assisted attackers to cause a denial of service application crash or execute arbitrary code via an M3U playlist file that contains a long absolute pathname...

CVE-2008-4470

CVE-2008-4470 describes a stack-based buffer overflow in Numark CUE 5.0 rev2 triggered by processing an M3U playlist containing a long absolute pathname. According to the description, this vulnerability could allow a user-assisted attacker to cause an application crash (DoS) or potentially execut...

Numark CUE 5 .m3u文件处理栈溢出漏洞

BUGTRAQ ID: 31042 CUE是一款专业的DJ混音软件。 CUE处理畸形.m3u文件时存在栈溢出漏洞，如果用户受骗打开的播放列表文件包含有超长的文件名的话，就可以触发这个溢出，导致执行任意指令。 Numark Cue 5.0 rev 2 Numark ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.numark.com/cue/ http://www.sebug.net/exploit/4589/...

Numark Cue 5.0 rev 2 Local .M3U File Stack Buffer Overflow Exploit

No description provided by source. /Numark Cue 5.0 rev 2 Local .M3U File Stack Buffer Overflow This sploit Launches calc.exe .. classical buffer overflow ,a 500 byte buffer is causing the exeption. Tested on WinXP Pro sp3,compiled with DEv-C++ 4.9.9.2. After preparation: |Access violation when...

Numark Cue 5.0 rev 2 - '.m3u' File Local Stack Buffer Overflow

/Numark Cue 5.0 rev 2 Local .M3U File Stack Buffer Overflow This sploit Launches calc.exe .. classical buffer overflow ,a 500 byte buffer is causing the exeption. Tested on WinXP Pro sp3,compiled with DEv-C++ 4.9.9.2. After preparation: |Access violation when executing 58414158| EAX 00000001 ECX...

Numark Cue 5.0 rev 2 Local .M3U File Stack Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ================================================================== Numark Cue 5.0 rev 2 Local .M3U File Stack Buffer Overflow Exploit ================================================================== /Numark Cue 5.0 rev 2 Local .M3U File...

VUPlayer 2.49 M3U Playlist File Remote Buffer Overflow Exploit

Summary VUPlayer is a freeware multi-format audio player for Windows. Description VUPlayer 2.49 suffers from a buffer overflow vulnerability that can be exploited remotely using user interaction and/or crafting. It fails to perform adequate boundry checking of the user input file .m3u playlist,...

CoolPlayer m3u playlist processing filename buffer overflow

Added: 08/13/2008 CVE: CVE-2008-3408 BID: 30418 OSVDB: 47194 Background CoolPlayer is a free audio player for Windows platforms. Problem A buffer overflow vulnerability in CoolPlayer allows command execution when a user opens an m3u playlist file containing a specially crafted filename. Resolutio...

CoolPlayer m3u playlist processing filename buffer overflow

Added: 08/13/2008 CVE: CVE-2008-3408 BID: 30418 OSVDB: 47194 Background CoolPlayer is a free audio player for Windows platforms. Problem A buffer overflow vulnerability in CoolPlayer allows command execution when a user opens an m3u playlist file containing a specially crafted filename. Resolutio...

CoolPlayer m3u playlist processing filename buffer overflow

Added: 08/13/2008 CVE: CVE-2008-3408 BID: 30418 OSVDB: 47194 Background CoolPlayer is a free audio player for Windows platforms. Problem A buffer overflow vulnerability in CoolPlayer allows command execution when a user opens an m3u playlist file containing a specially crafted filename. Resolutio...

CoolPlayer m3u playlist processing filename buffer overflow

Added: 08/13/2008 CVE: CVE-2008-3408 BID: 30418 OSVDB: 47194 Background CoolPlayer is a free audio player for Windows platforms. Problem A buffer overflow vulnerability in CoolPlayer allows command execution when a user opens an m3u playlist file containing a specially crafted filename. Resolutio...

CoolPlayer M3U文件处理栈溢出漏洞

BUGTRAQ ID: 30418 CoolPlayer是一款开放源码的音频播放器。 CoolPlayer在处理畸形.M3U文件时存在栈溢出漏洞，如果用户受骗加载了包含有超过260字节字符串的.M3U文件的话，就可以触发这个溢出，导致执行任意指令。 CoolPlayer 219 CoolPlayer ---------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://sourceforge.net/projects/coolplayer/ http://www.sebug.net/exploit/4340/...

CVE-2008-3408

Stack-based buffer overflow in CoolPlayer 2.18, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a crafted m3u file...

Stack overflow

Stack-based buffer overflow in CoolPlayer 2.18, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a crafted m3u file...

CVE-2008-3408

Stack-based buffer overflow in CoolPlayer 2.18, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a crafted m3u file...