kernel: ALSA: caiaq - Fix possible string-buffer overflow

Multiple buffer overflows in the caiaq Native Instruments USB audio functionality in the Linux kernel before 2.6.38-rc4-next-20110215 might allow attackers to cause a denial of service or possibly have unspecified other impact via a long USB device name, related to 1 the sndusbcaiaqaudioinit...

Nullsoft Winamp MIDI Timestamp Stack Buffer Overflow (CVE-2010-4370)

Winamp is a popular multimedia player, produced by Nullsoft, which is capable of playing many formats of audio and video files. Winamp can play CD tracks, MP3 music files or MPEG video files, as well as numerous other formats. Among the audio files supported by Winamp are MIDI files and MUS files...

CVE-2011-0502

Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions allows user-assisted remote attackers to cause a denial of service crash and possibly have other unspecified impact via a long line in a MIDI .mid file...

CVE-2011-0501

Stack-based buffer overflow in Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions allows user-assisted remote attackers to execute arbitrary code via a long line in a .mamx file...

Design/Logic Flaw

Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions allows user-assisted remote attackers to cause a denial of service crash and possibly have other unspecified impact via a long line in a MIDI .mid file...

CVE-2011-0501

Stack-based buffer overflow in Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions allows user-assisted remote attackers to execute arbitrary code via a long line in a .mamx file...

CVE-2011-0502

CVE-2011-0502 affects the Music Animation Machine MIDI Player 2006aug19 Release 035 (and possibly other versions). The vulnerability arises from processing a MIDI (.mid) file containing a long line, enabling user‑assisted remote attackers to cause a denial of service (crash) and potentially other...

CVE-2011-0501

The CVE-2011-0501 entry describes a stack-based buffer overflow in Music Animation Machine MIDI Player (noted as 2006aug19 Release 035 and possibly other versions). The underlying issue is a long line in a .mamx file that allows user‑assisted remote attackers to execute arbitrary code. Multiple c...

CVE-2011-0502

Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions allows user-assisted remote attackers to cause a denial of service crash and possibly have other unspecified impact via a long line in a MIDI .mid file...

Music Animation Machine MIDI Player SEH BOF

Exploit for windows platform in category local exploits Exploit Title: Music Animation Machine MIDI Player MAMX SEH BOF Date 1/4/2011 Author: Acidgen mailto:spama t hgrayhat.se Software Link: http://www.musanim.com/player/MAMPlayer2006aug19035.zip Version: 2006aug19 Release 035 Tested on: Windows...

Music Animation Machine MIDI Player - Local Buffer Overflow (SEH)

Exploit Title: Music Animation Machine MIDI Player MAMX SEH BOF Date 1/4/2011 Author: Acidgen mailto:spama t hgrayhat.se Software Link: http://www.musanim.com/player/MAMPlayer2006aug19035.zip Version: 2006aug19 Release 035 Tested on: Windows XP SP2 SE Virtualbox Version: 3.2.10 Build:r66523 Credi...

Music Animation Machine MIDI Player Local Crash PoC

Exploit for windows platform in category dos / poc Exploit Title: Music Animation Machine MIDI Player Local Crash PoC Date: 1/3/2011 Author: c0d3R'Z Software Link: http://www.musanim.com/player/MAMPlayer2006aug19035.zip Version: Release 035 Tested on: Windows XP SP2 EN VirtualBox The application...

Music Animation Machine MIDI Player - Local Buffer Overflow (SEH)

Music Animation Machine MIDI Player - Local Buffer Overflow SEH Exploit Title: Music Animation Machine MIDI Player MAMX SEH BOF Date 1/4/2011 Author: Acidgen mailto:spama t hgrayhat.se Software Link: http://www.musanim.com/player/MAMPlayer2006aug19035.zip Version: 2006aug19 Release 035 Tested on:...

Music Animation Machine MIDI Player - Local Crash (PoC)

Music Animation Machine MIDI Player - Local Crash PoC Exploit Title: Music Animation Machine MIDI Player Local Crash PoC Date: 1/3/2011 Author: c0d3R'Z Software Link: http://www.musanim.com/player/MAMPlayer2006aug19035.zip Version: Release 035 Tested on: Windows XP SP2 EN VirtualBox The applicati...

Music Animation Machine MIDI Player Proof Of Concept

Exploit Title: Music Animation Machine MIDI Player Local Crash PoC Date: 1/3/2011 Author: c0d3R'Z Software Link: http://www.musanim.com/player/MAMPlayer2006aug19035.zip Version: Release 035 Tested on: Windows XP SP2 EN VirtualBox The application crashes when trys to convert a malformed midi file...

Music Animation Machine MIDI Player - Local Crash (PoC)

Exploit Title: Music Animation Machine MIDI Player Local Crash PoC Date: 1/3/2011 Author: c0d3R'Z Software Link: http://www.musanim.com/player/MAMPlayer2006aug19035.zip Version: Release 035 Tested on: Windows XP SP2 EN VirtualBox The application crashes when trys to convert a malformed midi file...

nSense-2010-005: Winamp

nSense Vulnerability Research Security Advisory NSENSE-2010-005 --------------------------------------------------------------- Affected Vendor: Nullsoft Affected Product: Winamp 5.581 possibly older versions Platform: Windows Impact: Local code execution Vendor response: Patch CVE: CVE-2010-4370...

WinAmp integer overflow

Integer overflow in NSV streams parsing, MIDI files parsing...

Kryptos Logic Advisory: Winamp 5.6 Arbitrary Code Execution in MIDI Parser

http://www.kryptoslogic.com/advisories/2010/kryptoslogic-winamp-midi.txt ==-===-=====-=======-===========-=============-================= Winamp 5.6 Arbitrary Code Execution in MIDI Parser Kryptos Logic, December 2010 ==-===-=====-=======-===========-=============-================= ===== Timeline...

Winamp < 5.601 MIDI Timestamp Stack-based Buffer Overflow

The remote host is running Winamp, a media player for Windows. The version of Winamp installed on the remote host is earlier than 5.601. Such versions are potentially affected by a stack-based buffer overflow vulnerability due to an error in the 'inmidi.ddl' plugin that improperly serializes...