Design/Logic Flaw

The insertnotesteps function in readmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mid file. NOTE: a crash might be relevant when using the --background option...

Design/Logic Flaw

The playmidi function in playmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service large loop and CPU consumption via a crafted mid file. NOTE: CPU consumption might be relevant when using the --background option...

CVE-2017-11546

The insertnotesteps function in readmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mid file. NOTE: a crash might be relevant when using the --background option...

CVE-2017-11549

The playmidi function in playmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service large loop and CPU consumption via a crafted mid file. NOTE: CPU consumption might be relevant when using the --background option...

Heap overflow

The resamplegauss function in resample.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted mid file. NOTE: a crash might be relevant when using the --background option. NOTE: the TiMidity++ README.alsaseq documentation suggests a...

CVE-2017-11547

The resamplegauss function in resample.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted mid file. NOTE: a crash might be relevant when using the --background option. NOTE: the TiMidity++ README.alsaseq documentation suggests a...

CVE-2017-11547

CVE-2017-11547 affects TiMidity++ 2.14.0, where the resample_gauss function in resample.c can cause a heap-based buffer over-read via a crafted MIDI file, leading to denial of service (potential crash). The initial description notes a possible crash with --background; exploitation details/patch s...

CVE-2017-11549

The CVE-2017-11549 entry concerns TiMidity++ 2.14.0, where the play_midi function in playmidi.c is vulnerable. A crafted MIDI file can trigger a remote denial of service, causing a large loop and high CPU usage; CPU consumption may be particularly relevant when running with --background. The conn...

CVE-2017-11546

CVE-2017-11546 affects TiMidity++ 2.14.0. The vulnerability is in the insert_note_steps function (readmidi.c) and Allows a crafted MIDI file to trigger a divide-by-zero and crash the application (potentially relevant when running with --background). Connected advisories confirm a security patch; ...

CVE-2017-11547

The resamplegauss function in resample.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted mid file. NOTE: a crash might be relevant when using the --background option. NOTE: the TiMidity++ README.alsaseq documentation suggests a...

CVE-2017-11546

The insertnotesteps function in readmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mid file. NOTE: a crash might be relevant when using the --background option...

RealNetwork RealPlayer 10.5 MID File Handling Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22050/info RealNetwork RealPlayer is prone to a remote denial-of-service vulnerability because the application fails to handle specially crafted files. Exploiting this issue allows remote attackers to crash the applicatio...

INMATRIX Zoom Player Pro <= 6.0.0 (.MID) Integer Overflow PoC

No description provided by source. !/usr/bin/env python INMATRIX Zoom Player Pro = 6.0.0 .MID Integer Overflow PoC Found By: DrIDE Credits: Platen Tested: verified on v 5.0.2 and 6.0.0 on XP SP3 Download: http://www.inmatrix.com MIDI Structure must be accurate buff =...

DivX Player v7.0 (.mid) Buffer Overflow

Exploit for windows platform in category local exploits !/usr/bin/perl Title : DivX Player v7.0 .mid Buffer Overflow Author : KedAns-Dz E-mail : email protected Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : Windows Impact : Overflow in 'DivX...

VKPlayer 1.0 Denial Of Service

!/usr/bin/perl VKPlayer 1.0 .mid Denial of Service Exploit Download: http://www.brothersoft.com/vkplayer-239785.html Exploit Coded by: cr4wl3r From: Indonesia WARNING - WARNING - WARNING - WARNING Disclaimer: The author published the information under the condition that is not in the intention of...

VKPlayer 1.0 - .mid Denial of Service

VKPlayer 1.0 - .mid Denial of Service !/usr/bin/perl VKPlayer 1.0 .mid Denial of Service Exploit Download: http://www.brothersoft.com/vkplayer-239785.html Exploit Coded by: cr4wl3r From: Indonesia WARNING - WARNING - WARNING - WARNING Disclaimer: The author published the information under the...

Chasys Media Player 1.1 - '.mid' Local Buffer Overflow

!/usr/bin/perl Chasys Media Player 1.1 .mid Local Buffer Overflow Exploit Coded by: cr4wl3r From: Indonesia WARNING - WARNING - WARNING - WARNING Disclaimer: The author published the information under the condition that is not in the intention of the reader to use them in order to bring to himsel...

VKPlayer 1.0 (.mid) Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================= VKPlayer 1.0 .mid Denial of Service Exploit ============================================= !/usr/bin/perl VKPlayer 1.0 .mid Denial of Service Exploit Download:...

INMATRIX Zoom Player Pro 6.0.0 Integer Overflow

!/usr/bin/env python INMATRIX Zoom Player Pro = 6.0.0 .MID Integer Overflow PoC Found By: DrIDE Credits: Platen Tested: verified on v 5.0.2 and 6.0.0 on XP SP3 Download: http://www.inmatrix.com MIDI Structure must be accurate buff = "\x4d\x54\x68\x64\x00\x00\x00\x06\x00\x01\x00\x01\x00\x60\x4d\x5...

INMATRIX Zoom Player Pro 6.0.0 - '.mid' Integer Overflow (PoC)

!/usr/bin/env python INMATRIX Zoom Player Pro = 6.0.0 .MID Integer Overflow PoC Found By: DrIDE Credits: Platen Tested: verified on v 5.0.2 and 6.0.0 on XP SP3 Download: http://www.inmatrix.com MIDI Structure must be accurate buff = "\x4d\x54\x68\x64\x00\x00\x00\x06\x00\x01\x00\x01\x00\x60\x4d\x5...