CVE-2005-1132

LG U8120 mobile phone allows remote attackers to cause a denial of service device crash via a malformed MIDI file...

CVE-2005-1132

CVE-2005-1132 affects the LG U8120 mobile phone. The vulnerability allows remote attackers to trigger a denial of service (device crash) by presenting a malformed MIDI file. The provided documents confirm the affected device and the impact but do not include explicit root-cause details, exploit c...

LG U8120 Mobile Phone Denial of Service

=============================================================== Model: LG U8120 other LG phones maybe vulnerable Auth: http://www.lge.com Vulnerability Type: Remote Denial Of Service -- Disclaimer: ========== The information is provided "as is" without warranty of any kind. The author of this iss...

LG mobile phones DoS

Phone crashes on corrupted MIDI file...

LG U8120 Mobile Phone - .MIDI File Remote Denial of Service

LG U8120 Mobile Phone - .MIDI File Remote Denial of Service source: https://www.securityfocus.com/bid/13154/info A remote denial of service vulnerability is reported to affect the LG U8120 Mobile Phone. The report indicates that the issue manifests when an affected phone processes a malicious MID...

LG U8120 Mobile Phone - '.MIDI' File Remote Denial of Service

source: https://www.securityfocus.com/bid/13154/info A remote denial of service vulnerability is reported to affect the LG U8120 Mobile Phone. The report indicates that the issue manifests when an affected phone processes a malicious MIDI file. The following instructions are available: To perform...

Winamp MIDI Plugin Track Size Overflow

Binary data 1952.prm...

CVE-2003-0765

The INMIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via a MIDI file with a large "Track data size" value...

CVE-2003-0765

The INMIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via a MIDI file with a large "Track data size" value...

CVE-2003-0765

The CVE-2003-0765 entry affects the IN_MIDI.DLL plugin (version 3.01 and earlier) used by Winamp 2.91. According to the description, a remote attacker could execute arbitrary code by feeding a MIDI file containing a large Track data size value. The connected documents confirm Winamp/IN_MIDI.DLL a...

Winamp 2.91 lets code execution through MIDI files

Luigi Auriemma Application: Winamp http://www.winamp.com and http://classic.winamp.com Versions: Winamp 2.91 using INMIDI.DLL 3.01 Winamp 3 crashes but I have not found methods to execute code Platforms: Windows Bugs: Code execution through malformed MIDI files Risk: medium/high exploitation has...

WinAmp buffer overflow

Buffer overflow on MIDI files parsing...

NullSoft Winamp 2.812.913.03.1 - MIDI Plugin IN_MIDI.dll Track Data Size Buffer Overflow (PoC)

NullSoft Winamp 2.812.913.03.1 - MIDI Plugin INMIDI.dll Track Data Size Buffer Overflow PoC source: https://www.securityfocus.com/bid/8567/info Winamp MIDI plugin, INMIDI.DLL has been reported prone to a buffer overflow issue when handling malicious MIDI files. The issue presents itself when a...

NullSoft Winamp 2.81/2.91/3.0/3.1 - MIDI Plugin 'IN_MIDI.dll' Track Data Size Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/8567/info Winamp MIDI plugin, INMIDI.DLL has been reported prone to a buffer overflow issue when handling malicious MIDI files. The issue presents itself when a malicious value is passed as the Track Data Size of a malicious MIDI file header. Although...

CVE-2003-0346

Multiple integer overflows in a Microsoft Windows DirectX MIDI library QUARTZ.DLL allow remote attackers to execute arbitrary code via a MIDI .mid file with 1 large length for a Text or Copyright string, or 2 a large number of tracks, which leads to a heap-based buffer overflow...

Windows DirectX MIDI integer overflow

Integer overflow during MIDI processing leads to heap corruption allowing code execution...

CERT Advisory CA-2003-18 Integer Overflows in Microsoft Windows DirectX MIDI Library

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2003-18 Integer Overflows in Microsoft Windows DirectX MIDI Library Original issue date: July 25, 2003 Last revised: -- Source: CERT/CC A complete revision history is at the end of this file. Systems Affected Microsoft Windows systems running...

CVE-2003-0346

CVE-2003-0346, CAN CAN-2003-0346 is tied to a heap-based overflow in the Microsoft DirectX QUARTZ.DLL MIDI handling. A specially crafted MIDI file that sets an oversized Text/Copyright string or an excessive number of MThd tracks can trigger integer overflow, heap corruption, and arbitrary code e...

CVE-2003-0346

Multiple integer overflows in a Microsoft Windows DirectX MIDI library QUARTZ.DLL allow remote attackers to execute arbitrary code via a MIDI .mid file with 1 large length for a Text or Copyright string, or 2 a large number of tracks, which leads to a heap-based buffer overflow...

Microsoft Windows DirectX MIDI library does not adequately validate MThd track values in MIDI files

Overview A Microsoft Windows DirectX library, quartz.dll, does not properly validate the number of tracks value in Musical Instrument Digital Interface MIDI files. An attacker could exploit this vulnerability to execute arbitrary code or crash any application using the library, causing a denial o...