Winamp < 5.22 Malformed Midi File Handling Buffer Overflow

The remote host is using Winamp, a popular media player for Windows. The version of Winamp installed on the remote Windows host reportedly contains a buffer overflow in the 'inmidi.dll' library that can be exploited using a specially crafted MIDI file to either crash the affected application or...

Winamp <= 5.21 (Midi File Header Handling) Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ============================================================== Winamp include include void usagechar file; char header = "\x4D\x54\x68\x64\x00\x00" "\x00\x06\x00\x00\x00\x01" "\x00\x60\x4D\x54\x72\x6B" "\x00\x00"; char badc0de =...

Winamp 5.21 - '.Midi' File Header Handling Buffer Overflow (PoC)

/ Winamp 5.21 - Midi Buffer Overflow inmidi.dll PoC coded by: BassReFLeX Date: 19 Jun 2006 / include include include void usagechar file; char header = "\x4D\x54\x68\x64\x00\x00" "\x00\x06\x00\x00\x00\x01" "\x00\x60\x4D\x54\x72\x6B" "\x00\x00"; char badc0de = "\xFF\xFF\xFF\xFF\xFF\xFF"...

Winamp < 5.22 MIDI File Handling Overflow

Binary data 3658.prm...

CVE-2005-1132

LG U8120 mobile phone allows remote attackers to cause a denial of service device crash via a malformed MIDI file...

CVE-2005-1132

LG U8120 mobile phone allows remote attackers to cause a denial of service device crash via a malformed MIDI file...

CVE-2005-1132

CVE-2005-1132 affects the LG U8120 mobile phone. The vulnerability allows remote attackers to trigger a denial of service (device crash) by presenting a malformed MIDI file. The provided documents confirm the affected device and the impact but do not include explicit root-cause details, exploit c...

LG U8120 Mobile Phone Denial of Service

=============================================================== Model: LG U8120 other LG phones maybe vulnerable Auth: http://www.lge.com Vulnerability Type: Remote Denial Of Service -- Disclaimer: ========== The information is provided "as is" without warranty of any kind. The author of this iss...

LG mobile phones DoS

Phone crashes on corrupted MIDI file...

LG U8120 Mobile Phone - .MIDI File Remote Denial of Service

LG U8120 Mobile Phone - .MIDI File Remote Denial of Service source: https://www.securityfocus.com/bid/13154/info A remote denial of service vulnerability is reported to affect the LG U8120 Mobile Phone. The report indicates that the issue manifests when an affected phone processes a malicious MID...

LG U8120 Mobile Phone - '.MIDI' File Remote Denial of Service

source: https://www.securityfocus.com/bid/13154/info A remote denial of service vulnerability is reported to affect the LG U8120 Mobile Phone. The report indicates that the issue manifests when an affected phone processes a malicious MIDI file. The following instructions are available: To perform...

Winamp MIDI Plugin Track Size Overflow

Binary data 1952.prm...

CVE-2003-0765

The INMIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via a MIDI file with a large "Track data size" value...

CVE-2003-0765

The CVE-2003-0765 entry affects the IN_MIDI.DLL plugin (version 3.01 and earlier) used by Winamp 2.91. According to the description, a remote attacker could execute arbitrary code by feeding a MIDI file containing a large Track data size value. The connected documents confirm Winamp/IN_MIDI.DLL a...

CVE-2003-0765

The INMIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via a MIDI file with a large "Track data size" value...

Winamp 2.91 lets code execution through MIDI files

Luigi Auriemma Application: Winamp http://www.winamp.com and http://classic.winamp.com Versions: Winamp 2.91 using INMIDI.DLL 3.01 Winamp 3 crashes but I have not found methods to execute code Platforms: Windows Bugs: Code execution through malformed MIDI files Risk: medium/high exploitation has...

WinAmp buffer overflow

Buffer overflow on MIDI files parsing...

NullSoft Winamp 2.812.913.03.1 - MIDI Plugin IN_MIDI.dll Track Data Size Buffer Overflow (PoC)

NullSoft Winamp 2.812.913.03.1 - MIDI Plugin INMIDI.dll Track Data Size Buffer Overflow PoC source: https://www.securityfocus.com/bid/8567/info Winamp MIDI plugin, INMIDI.DLL has been reported prone to a buffer overflow issue when handling malicious MIDI files. The issue presents itself when a...

NullSoft Winamp 2.81/2.91/3.0/3.1 - MIDI Plugin 'IN_MIDI.dll' Track Data Size Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/8567/info Winamp MIDI plugin, INMIDI.DLL has been reported prone to a buffer overflow issue when handling malicious MIDI files. The issue presents itself when a malicious value is passed as the Track Data Size of a malicious MIDI file header. Although...

CVE-2003-0346

Multiple integer overflows in a Microsoft Windows DirectX MIDI library QUARTZ.DLL allow remote attackers to execute arbitrary code via a MIDI .mid file with 1 large length for a Text or Copyright string, or 2 a large number of tracks, which leads to a heap-based buffer overflow...