60 matches found
Libmodplug 0.8.8.2 - .abc Stack Buffer Overflow (PoC)
Libmodplug 0.8.8.2 - .abc Stack Buffer Overflow PoC include include include / libmodplug = 0.8.8.2 .abc stack-based buffer overflow poc http://modplug-xmms.sourceforge.net/ by: epiphant this exploits one of many overflows in loadabc.cpp lol vlc media player uses libmodplug greets: defrost, babi,...
DSA-2226-1 libmodplug - buffer overflow
Bulletin has no description...
Fedora Update for libmodplug FEDORA-2011-5204
Check for the Version of libmodplug OpenVAS Vulnerability Test Fedora Update for libmodplug FEDORA-2011-5204 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
[SECURITY] Fedora 14 Update: libmodplug-0.8.8.2-1.fc14
Modplug mod music file format library...
GLSA-200907-07 : ModPlug: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-200907-07 ModPlug: User-assisted execution of arbitrary code Two vulnerabilities have been reported in ModPlug: dummy reported an integer overflow in the CSoundFile::ReadMed function when processing a MED file with a crafted song...
ModPlug: User-assisted execution of arbitrary code
Background ModPlug is a library for playing MOD-like music. Description Two vulnerabilities have been reported in ModPlug: dummy reported an integer overflow in the CSoundFile::ReadMed function when processing a MED file with a crafted song comment or song name, which triggers a heap-based buffer...
[SECURITY] Fedora 10 Update: libmodplug-0.8.7-1.fc10
Modplug mod music file format library...
Mandriva Update for libmodplug MDKSA-2007:001 (libmodplug)
Check for the Version of libmodplug OpenVAS Vulnerability Test Mandriva Update for libmodplug MDKSA-2007:001 libmodplug Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...
Mandriva Update for libmodplug MDKSA-2007:001 (libmodplug)
Check for the Version of libmodplug OpenVAS Vulnerability Test Mandriva Update for libmodplug MDKSA-2007:001 libmodplug Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...
GLSA-200612-04 : ModPlug: Multiple buffer overflows
The remote host is affected by the vulnerability described in GLSA-200612-04 ModPlug: Multiple buffer overflows Luigi Auriemma has reported various boundary errors in loadit.cpp and a boundary error in the 'CSoundFile::ReadSample' function in sndfile.cpp. Impact : A remote attacker can entice a...
ModPlug: Multiple buffer overflows
Background ModPlug is a library for playing MOD-like music. Description Luigi Auriemma has reported various boundary errors in loadit.cpp and a boundary error in the "CSoundFile::ReadSample" function in sndfile.cpp. Impact A remote attacker can entice a user to read crafted modules or ITP files,...
MODPlug Tracker多个缓冲区溢出漏洞
MODPlug Tracker(也称为OpenMPT)允许用户在基于Windows的PC上创建音乐。 OpenMPT的ReadITProject函数没有过滤ITP文件中的文本字段,允许攻击者覆盖全局变量,执行恶意代码。请注意libmodplug中不支持ITP文件。 soundlib/Loadit.cpp中的漏洞代码: BOOL CSoundFile::ReadITProjectLPCBYTE lpStream, DWORD dwMemLength ... // Song name // name string length...
CVE-2006-4192
Multiple buffer overflows in MODPlug Tracker OpenMPT 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via 1 long strings in ITP files used by the CSoundFile::ReadITProject functi...
CVE-2006-4192
Multiple buffer overflows in MODPlug Tracker OpenMPT 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via 1 long strings in ITP files used by the CSoundFile::ReadITProject functi...
DEBIAN-CVE-2006-4192
Multiple buffer overflows in MODPlug Tracker OpenMPT 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via 1 long strings in ITP files used by the CSoundFile::ReadITProject functi...
CVE-2006-4192
Multiple buffer overflows in MODPlug Tracker OpenMPT 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via 1 long strings in ITP files used by the CSoundFile::ReadITProject functi...
CVE-2006-4192
Multiple buffer overflows in MODPlug Tracker OpenMPT 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via 1 long strings in ITP files used by the CSoundFile::ReadITProject functi...
CVE-2006-4192
CVE-2006-4192 is a buffer overflow vulnerability in libmodplug modules embedded in GStreamer (via MODPlug Tracker/OpenMPT usage) that could allow remote code execution when processing crafted ITProject/AMF files. Connected advisories (RHSA-2011:0477 and related OpenVAS/Nessus entries) describe an...
CVE-2006-4192
Multiple buffer overflows in MODPlug Tracker OpenMPT 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via 1 long strings in ITP files used by the CSoundFile::ReadITProject functi...
Multiple MODPlug Tracker/OpenMPT security vulnerabilities
Few heap and stack based buffer overflows...