Cisco Email Security Appliance MP3 Content Filter Bypass (cisco-sa-20191120-esa-mp3-bypass)

According to its self-reported version, Cisco Email Security Appliance ESA is affected by a vulnerability in the MP3 detection engine of Cisco AsyncOS Software due to improper validation of certain MP3 file types. An unauthenticated, remote attacker can exploit this, by sending a crafted MP3 file...

USN-2702-3 firefox regression

USN-2702-1 fixed vulnerabilities in Firefox. After upgrading, some users in the US reported that their default search engine switched to Yahoo. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Gary Kwong, Christian Holler, Byron Campen, Tyson Smith,...

BS Player 2.56 DLL Hijacking Exploit

/ Description: BS Player 2.56 vulnerable for another DLL Preloading on ehtrace.dll while loading .mp3 content. Date: August 29, 2010 Author: Classity Security Scans PoC: Displaying message box, but can be replaced by DLL with arbitrary payload. / include define DllExport declspec dllexport BOOL...