95 matches found
NovaPlayer 1.0 - .mp3 File Local Denial of Service (2)
NovaPlayer 1.0 - .mp3 File Local Denial of Service 2 !/usr/bin/perl print qq NovaPlayer 1.0 .mp3 Local Denial of Service DoS by Mr.tro0oqy ; author: Mr.tro0oqy email : [email protected] greetz : Red-D3v1L , virushima , Stack system "color e"; my $bb="tro0oqy.mp3"; my $fk="\x41" x 10000; open...
RealNetworks RealPlayer MP3 Files Processing Buffer Overflow (CVE-2007-5080)
RealPlayer and RealOne Player are media player applications developed by RealNetworks, Inc. These applications are capable of playing back numerous multimedia file formats. The application can open media files from local file system or network servers. RealPlayer has an extensible nature that...
Integer overflow
Multiple integer overflows in the jpeg.w5s and png.w5s filters in Winamp before 5.57 allow remote attackers to execute arbitrary code via malformed 1 JPEG or 2 PNG data in an MP3 file...
CVE-2009-4356
Multiple integer overflows in the jpeg.w5s and png.w5s filters in Winamp before 5.57 allow remote attackers to execute arbitrary code via malformed 1 JPEG or 2 PNG data in an MP3 file...
Microsoft Windows Media formats security vulnerabilities
Uninitialized pointer free on ASF files parsing, memory corruption on MP3 files parsing...
Music Tag Editor 1.61 build 212 Remote Buffer Overflow PoC
Summary Simple-to-use WMA / MP3 tag editor that allows you to change tagged information about your MP3/WMA music files. Quickly change music filenames, create PLS/M3U playlists and even add lyrics to your music files, with full UNICODE support. Music filenames and tags are never what they should,...
Code injection
xine-lib before 1.1.15 allows remote attackers to cause a denial of service crash via "MP3 files with metadata consisting only of separators."...
CVE-2008-5248
xine-lib before 1.1.15 allows remote attackers to cause a denial of service crash via "MP3 files with metadata consisting only of separators."...
CVE-2008-5248
xine-lib before 1.1.15 allows remote attackers to cause a denial of service crash via "MP3 files with metadata consisting only of separators."...
FreeBSD Ports: yamt
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Icecast 远端阻断服务弱点
CVE ID: CVE-2001-1083 Icecast 1.01.3.7 版内含 DoS 安全漏洞, 如果伺服器打开了 http-server file streaming 支援, 入侵者即可利用来达成 DoS 攻击; Http-server file streaming 内定是关闭的, 但是在 "icecasr.conf" 打开 "staticdir" 功能时, 此功能即会启动。 这个 DoS 攻击造成 Windows 的 "Application Error", 因此将造成 Icecast-server 整个当掉. 此 DoS 攻击是在 mp3 档案结尾加上 "/" or ""...
Rhythmbox Vulnerability
Application: Rhythmbox 0.11.5 OS: Linux - Ubuntu 8.04 ------------------------------------------------------ 1 - Description 2 - Vulnerability 3 - POC/EXPLOIT ------------------------------------------------------ Description Rhythmbox is a renowned player of mp3 files that comes bundled in ubunt...
CVE-2007-6683
The browser plugin in VideoLAN VLC 0.8.6d allows remote attackers to overwrite arbitrary files via 1 the :demuxdump-file option in a filename in a playlist, or 2 a EXTVLCOPT statement in an MP3 file, possibly an argument injection vulnerability...
Heap overflow in RealPlayer ID3 tag parser
======= Summary ======= Name: Heap overflow in RealPlayer ID3 tag parsing code Release Date: 29 October 2007 Reference: NGS00432 Discover: John Heasman [email protected] Vendor: RealNetworks Systems Affected: Several builds of RealPlayer 10.5, All builds of RealPlayer 10. For additional affect...
CVE-2007-4398
Multiple CRLF injection vulnerabilities in the 1 now-playing.rb and 2 xmms.pl 1.1 scripts for WeeChat allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...
Atomix MP3 - .MP3 File Buffer Overflow
Atomix MP3 - .MP3 File Buffer Overflow // source: https://www.securityfocus.com/bid/23756/info Atomix MP3 is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker could exploit...
getID3 < 1.7.8-b1 Multiple Remote Vulnerabilities
getID3, a web-based tool for extracting information from MP3 files, is installed on the remote web server. The installation of getID3 includes a set of demo scripts that allow an unauthenticated, remote attacker to read and delete arbitrary files, write files with some restrictions, and execute...
Design/Logic Flaw
Unspecified vulnerability in certain demonstration scripts in getID3 1.7.1, as used in the Mediafield and Audio modules for Drupal, allows remote attackers to read and delete arbitrary files, list arbitrary directories, and write to empty files or .mp3 files via unknown vectors...
CVE-2005-2310
Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arbitrary code via an MP3 file with a long ID3v2 tag such as 1 ARTIST or 2 TITLE...