CVE-2011-0502

CVE-2011-0502 affects the Music Animation Machine MIDI Player 2006aug19 Release 035 (and possibly other versions). The vulnerability arises from processing a MIDI (.mid) file containing a long line, enabling user‑assisted remote attackers to cause a denial of service (crash) and potentially other...

CVE-2011-0501

The CVE-2011-0501 entry describes a stack-based buffer overflow in Music Animation Machine MIDI Player (noted as 2006aug19 Release 035 and possibly other versions). The underlying issue is a long line in a .mamx file that allows user‑assisted remote attackers to execute arbitrary code. Multiple c...

Music Animation Machine MIDI Player SEH BOF

Exploit for windows platform in category local exploits Exploit Title: Music Animation Machine MIDI Player MAMX SEH BOF Date 1/4/2011 Author: Acidgen mailto:spama t hgrayhat.se Software Link: http://www.musanim.com/player/MAMPlayer2006aug19035.zip Version: 2006aug19 Release 035 Tested on: Windows...

Music Animation Machine MIDI Player Local Crash PoC

Exploit for windows platform in category dos / poc Exploit Title: Music Animation Machine MIDI Player Local Crash PoC Date: 1/3/2011 Author: c0d3R'Z Software Link: http://www.musanim.com/player/MAMPlayer2006aug19035.zip Version: Release 035 Tested on: Windows XP SP2 EN VirtualBox The application...

Music Animation Machine MIDI Player - Local Buffer Overflow (SEH)

Music Animation Machine MIDI Player - Local Buffer Overflow SEH Exploit Title: Music Animation Machine MIDI Player MAMX SEH BOF Date 1/4/2011 Author: Acidgen mailto:spama t hgrayhat.se Software Link: http://www.musanim.com/player/MAMPlayer2006aug19035.zip Version: 2006aug19 Release 035 Tested on:...

Music Animation Machine MIDI Player - Local Buffer Overflow (SEH)

Exploit Title: Music Animation Machine MIDI Player MAMX SEH BOF Date 1/4/2011 Author: Acidgen mailto:spama t hgrayhat.se Software Link: http://www.musanim.com/player/MAMPlayer2006aug19035.zip Version: 2006aug19 Release 035 Tested on: Windows XP SP2 SE Virtualbox Version: 3.2.10 Build:r66523 Credi...

Music Animation Machine MIDI Player - Local Crash (PoC)

Music Animation Machine MIDI Player - Local Crash PoC Exploit Title: Music Animation Machine MIDI Player Local Crash PoC Date: 1/3/2011 Author: c0d3R'Z Software Link: http://www.musanim.com/player/MAMPlayer2006aug19035.zip Version: Release 035 Tested on: Windows XP SP2 EN VirtualBox The applicati...

Music Animation Machine MIDI Player - Local Crash (PoC)

Exploit Title: Music Animation Machine MIDI Player Local Crash PoC Date: 1/3/2011 Author: c0d3R'Z Software Link: http://www.musanim.com/player/MAMPlayer2006aug19035.zip Version: Release 035 Tested on: Windows XP SP2 EN VirtualBox The application crashes when trys to convert a malformed midi file...

Music Animation Machine MIDI Player Proof Of Concept

Exploit Title: Music Animation Machine MIDI Player Local Crash PoC Date: 1/3/2011 Author: c0d3R'Z Software Link: http://www.musanim.com/player/MAMPlayer2006aug19035.zip Version: Release 035 Tested on: Windows XP SP2 EN VirtualBox The application crashes when trys to convert a malformed midi file...

WinAmp integer overflow

Integer overflow in NSV streams parsing, MIDI files parsing...

nSense-2010-005: Winamp

nSense Vulnerability Research Security Advisory NSENSE-2010-005 --------------------------------------------------------------- Affected Vendor: Nullsoft Affected Product: Winamp 5.581 possibly older versions Platform: Windows Impact: Local code execution Vendor response: Patch CVE: CVE-2010-4370...

Kryptos Logic Advisory: Winamp 5.6 Arbitrary Code Execution in MIDI Parser

http://www.kryptoslogic.com/advisories/2010/kryptoslogic-winamp-midi.txt ==-===-=====-=======-===========-=============-================= Winamp 5.6 Arbitrary Code Execution in MIDI Parser Kryptos Logic, December 2010 ==-===-=====-=======-===========-=============-================= ===== Timeline...

Winamp "in_midi"组件MIDI时间戳栈缓冲区溢出漏洞

BUGTRAQ ID: 45221 Winamp是一款流行的媒体播放器，支持多种文件格式。 Winamp在实现上存在漏洞，攻击者可利用此漏洞以用户权限在受影响的应用程序中执行任意代码，造成拒绝服务。 此漏洞源于未能对用户提供的数据执行足够的边界检查。Winamp的栈分配是可预测的。攻击者可选择写入到已保存的基本指针的值，因此当恢复了基础指针后，调用函数的栈报文将被移动到攻击者控制的返回地址。 Nullsoft Winamp 5.01 - 5.5.8 厂商补丁： Nullsoft -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Winamp < 5.601 MIDI Timestamp Stack-based Buffer Overflow

The remote host is running Winamp, a media player for Windows. The version of Winamp installed on the remote host is earlier than 5.601. Such versions are potentially affected by a stack-based buffer overflow vulnerability due to an error in the 'inmidi.ddl' plugin that improperly serializes...

Winamp 5.6 - 'MIDI Parser' Arbitrary Code Execution

http://www.kryptoslogic.com/advisories/2010/kryptoslogic-winamp-midi.txt PoC: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/15706.c ==-===-=====-=======-===========-=============-================= Winamp 5.6 Arbitrary Code Execution in MIDI Parser Kryptos Logic,...

Winamp < 5.601 MIDI Timestamp Stack Buffer Overflow

Binary data 5726.prm...

Winamp 5.6 - MIDI Parser Arbitrary Code Execution

Winamp 5.6 - MIDI Parser Arbitrary Code Execution http://www.kryptoslogic.com/advisories/2010/kryptoslogic-winamp-midi.txt PoC: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/15706.c ==-===-=====-=======-===========-=============-================= Winamp 5.6...

Winamp 5.6 Arbitrary Code Execution In MIDI Parser

http://www.kryptoslogic.com/advisories/2010/kryptoslogic-winamp-midi.txt ==-===-=====-=======-===========-=============-================= Winamp 5.6 Arbitrary Code Execution in MIDI Parser Kryptos Logic, December 2010 ==-===-=====-=======-===========-=============-================= ===== Timeline...

CVE-2010-4370

Multiple integer overflows in the inmidi plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted MIDI file that triggers a buffer overflow...

Integer overflow

Multiple integer overflows in the inmidi plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted MIDI file that triggers a buffer overflow...