1106 matches found
CVE-2008-3408
CoolPlayer contains a stack-based buffer overflow in m3u playlist handling (filename processing) affecting CoolPlayer 2.18 and potentially other versions. A remote attacker could execute arbitrary code by opening a crafted .m3u file; exploitation relies on the user opening the exploit file and wo...
CoolPlayer M3U文件缓冲区溢出漏洞
BUGTRAQ ID: 30418 CNCAN ID：CNCAN-2008073004 CoolPlayer是一款媒体播放程序。 CoolPlayer处理M3U文件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 构建恶意的M3U文件，诱使用户打开，可导致以应用程序权限执行任意指令。 CoolPlayer 219 目前没有解决方案提供： http://sourceforge.net/projects/coolplayer/...
CoolPlayer m3u File Local Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ================================================= CoolPlayer m3u File Local Buffer Overflow Exploit ================================================= !/usr/bin/perl ksOSe - 07/29/2008 use warnings; use strict; http://www.metasploit.com...
CoolPlayer 2.18 - '.m3u' File Local Buffer Overflow
!/usr/bin/perl ksOSe - 07/29/2008 use warnings; use strict; http://www.metasploit.com EXITFUNC=seh, CMD=c:\WINDOWS\system32\calc.exe x86/shikataganai succeeded, final size 169 my $shellcode = "\xd9\xca\xd9\x74\x24\xf4\x5e\xb8\xf5\x65\x2d\xfb\x31\xc9\xb1"...
powerdvd_bof.pl.txt
!/usr/bin/perl CyberLink PowerDVD ./evillist.m3u"; or .pls print m3u "$buffer"; print "\n-- Evil Playlist created... Have fun!\n"; July, 2008...
QuickPlayer '.m3u'文件缓冲区溢出漏洞
BUGTRAQ ID: 30252 CNCAN ID：CNCAN-2008071702 QuickPlayer是一款媒体播放程序。 QuickPlayer处理'.m3u'文件存在缓冲区溢出，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击，可能导致任意代码执行。 构建包含超长URL的'.m3u'文件，诱使QuickPlayer解析，可触发此漏洞。 M.J.M Quick Player 1.3 目前没有解决方案提供： http://www.mjm.at.ua/ !/usr/bin/python QuickPlayer 1.3 .m3u url handling DOS This pytho...
MediaMonkey 3.0.3 - URI Handling Multiple Denial of Service Vulnerabilities
source: https://www.securityfocus.com/bid/30251/info MediaMonkey is prone to two denial-of-service vulnerabilities because it fails to handle user-supplied input. An attacker can exploit these issues to crash the application. Given the nature of these vulnerabilities, the attacker may also be abl...
Stack overflow
Stack-based buffer overflow in DAP.exe in Download Accelerator Plus DAP 7.0.1.3, 8.6.6.3, and other 8.x versions allows user-assisted remote attackers to execute arbitrary code via an M3U .m3u file containing a long MP3 URL...
CVE-2008-3182
Stack-based buffer overflow in DAP.exe in Download Accelerator Plus DAP 7.0.1.3, 8.6.6.3, and other 8.x versions allows user-assisted remote attackers to execute arbitrary code via an M3U .m3u file containing a long MP3 URL...
CVE-2008-3182
Stack-based buffer overflow in DAP.exe in Download Accelerator Plus DAP 7.0.1.3, 8.6.6.3, and other 8.x versions allows user-assisted remote attackers to execute arbitrary code via an M3U .m3u file containing a long MP3 URL...
CVE-2008-3182
Affected software: Download Accelerator Plus (DAP) by SpeedBit, specifically 7.x/8.x series (example: 7.0.1.3, 8.6.6.3). Vulnerability: Stack-based buffer overflow in DAP.exe that can be triggered by parsing an M3U file containing a long MP3 URL. Impact: remote code execution on the affected host...
KLA10140 ACE vulnerability in Download Accelerator Plus
A buffer overflow was found in Download Accelerator Plus. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed M3U file. Original advisories - Exploitation Public exploits exist for this vulnerability...
Download Accelerator Plus - DAP 8.x m3u File Buffer Overflow Exploit (c)
No description provided by source. include stdio.h include stdlib.h / DAP 8.x .m3u File BOF C Exploit for XP SP2,SP3 English SecurityFocus Advisory: Download Accelerator Plus DAP is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied inpu...
Download Accelerator Plus DAP 8.x - .m3u File Buffer Overflow
Download Accelerator Plus DAP 8.x - .m3u File Buffer Overflow include include / DAP 8.x .m3u File BOF C Exploit for XP SP2,SP3 English SecurityFocus Advisory: Download Accelerator Plus DAP is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on...
Download Accelerator Plus DAP 8.x - '.m3u' File Buffer Overflow
include include / DAP 8.x .m3u File BOF C Exploit for XP SP2,SP3 English SecurityFocus Advisory: Download Accelerator Plus DAP is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Successfully exploiting this issue may allow remo...
Winamp <= 5.06 IN_CDDA.dll Remote Buffer Overflow Exploit
No description provided by source. / Credits go to the author How to fix and study the bug: - The cdda library only reserves 20 bytes for names when files are ".cda" - run Winamp with ollye - when loaded locate and break at: 10009BBB 8D4C24 20 LEA ECX,DWORD PTR SS:ESP+20...
SonicStage CP buffer overflow vulnerability
Overview SonicStage CP is vulnerable to buffer overflow. Sony SonicStage CP is software for music management. SonicStage CP contains a vulnerability that can be exploited to cause a buffer overflow when importing a specially crafted playlist file with the .m3u extension. Impact Importing a...
NERO Media Player <= 1.4.0.35b M3U File Buffer Overflow PoC
No description provided by source. NERO Media Player = 1.4.0.35b Remote Buffer Overflow .M3U This exception may be expected and handled. eax=03e90f40 ebx=41414141 ecx=009d01c8 edx=009d015c esi=03e90f38 edi=41414141 eip=7c92b3fb esp=0010bff8 ebp=0010c214 iopl=0 nv up ei pl nz ac pe nc cs=001b...
Rosoft Media Player 4.1.8 Buffer Overflow ( .M3U)
Rosoft Media Player 4.1.8 Buffer Overflow .M3U @nolife : Pow...Pow ..If you are kind i'll show my set of supers mega Tools, fuzzers ,and all the automated stuff i use For M3U/ASX/PLS Pow..Pow ... Nolifing is actually a Disease... Do not be mean with nolife's eax=41414141 ebx=41414141 ecx=00000000...
rosoft-overflow.txt
Rosoft Media Player 4.1.8 Buffer Overflow .M3U @nolife : Pow...Pow ..If you are kind i'll show my set of supers mega Tools, fuzzers ,and all the automated stuff i use For M3U/ASX/PLS Pow..Pow ... Nolifing is actually a Disease... Do not be mean with nolife's eax=41414141 ebx=41414141 ecx=00000000...