UBUNTU-CVE-2015-4475

The mozilla::AudioSink function in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 mishandles inconsistent sample formats within MP3 audio data, which allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via a malformed file...

CVE-2015-4475

The mozilla::AudioSink function in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 mishandles inconsistent sample formats within MP3 audio data, which allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via a malformed file...

mozilla -- multiple vulnerabilities

The Mozilla Project reports: MFSA 2015-79 Miscellaneous memory safety hazards rv:40.0 / rv:38.2 MFSA 2015-80 Out-of-bounds read with malformed MP3 file MFSA 2015-81 Use-after-free in MediaStream playback MFSA 2015-82 Redefinition of non-configurable JavaScript object properties MFSA 2015-83...

WordPress MP3-jPlayer 2.3.2 Path Disclosure Vulnerability

WordPress MP3-jPlayer plugin version 2.3.2 suffers from a path disclosure vulnerability. Title: Path Disclosure Vulnerability in wordpress plugin MP3-jPlayer v2.3.2 Author: Larry W. Cashdollar, @larry0 Date: 2015-07-12 Download Site: https://wordpress.org/plugins/mp3-jplayer/ Vendor:...

WordPress MP3 jPlayer Plugin <= 2.3.3 - Full Path Disclosure

Because of this vulnerability, attackers can disclose path information on wordpress sites. Solution Update the plugin...

MP3-jPlayer <= 2.4.2 - Full Path Disclosure

The download.php code allows arbitrary users to disclose path information on WordPress sites with this plugin installed. 120 $info = " 121 Get: " . $mp3 . " 122 Sent: " . $sent . " 123 File: " . $file . " 124 Open: " . $SERVER'DOCUMENTROOT' . $fp . " 125 Root: " . $rooturl . " 126 pID: "...

WordPress MP3 jPlayer Plugin <= 2.3.3 - Full Path Disclosure

Because of this vulnerability, attackers can disclose path information on wordpress sites. Solution Update the plugin...

WordPress MP3-jPlayer 2.3.2 Path Disclosure

Title: Path Disclosure Vulnerability in wordpress plugin MP3-jPlayer v2.3.2 Author: Larry W. Cashdollar, @larry0 Date: 2015-07-12 Download Site: https://wordpress.org/plugins/mp3-jplayer/ Vendor: https://profiles.wordpress.org/simonward-1/ Vendor Notified: 2015-08-06 Vendor Contact: Description:...

MP3-jPlayer <= 2.4.2 - Full Path Disclosure

The download.php code allows arbitrary users to disclose path information on WordPress sites with this plugin installed. 120 $info = " 121 Get: " . $mp3 . " 122 Sent: " . $sent . " 123 File: " . $file . " 124 Open: " . $SERVER'DOCUMENTROOT' . $fp . " 125 Root: " . $rooturl . " 126 pID: "...

Free MP3 CD Ripper Buffer Overflow Vulnerability

Free MP3 CD Ripper is a free software to convert MP3 format to CD. The current version of Free MP3 CD Ripper V2.8 does not strictly check the user input file during the .wav to .mp3 format conversion process, and by constructing a special .wav file, inducing the user to convert it can trigger a...

Windows Media Player MediaInfo 0.7.61 Buffer Overflow

!/usr/bin/perl -w Title : Windows Media Player MediaInfo v0.7.61 - Buffer Overflow Exploit Tested on Windows 7 / Server 2008 Download Link : https://sourceforge.net/projects/mediainfo/files/binary/mediainfo-gui/0.7.61/ Author : Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/rezasp...

RM Downloader 2.7.5.400 - Local Buffer Overflow (Metasploit)

RM Downloader 2.7.5.400 - Local Buffer Overflow Metasploit + Author: TUNISIAN CYBER + Exploit Title: RM Downloader v2.7.5.400 Local Buffer Overflow MSF + Date: 25-03-2015 + Type: Local Exploits + Tested on: WinXp/Windows 7 Pro + Vendor:...

Free MP3 CD Ripper 2.6 2.8 (Windows 7) - .wav File Buffer Overflow (SEH) (DEP Bypass)

Free MP3 CD Ripper 2.6 2.8 Windows 7 - .wav File Buffer Overflow SEH DEP Bypass !/usr/bin/python original p0c https://www.exploit-db.com/exploits/36465/ credit to TUNISIAN CYBER modified SEH Exploit https://www.exploit-db.com/exploits/36826/ credit to ThreatActor at CoreRed.com Software Link:...

Free MP3 CD Ripper 2.6 2.8 (Windows 7) - '.wav' File Buffer Overflow (SEH) (DEP Bypass)

!/usr/bin/python original p0c https://www.exploit-db.com/exploits/36465/ credit to TUNISIAN CYBER modified SEH Exploit https://www.exploit-db.com/exploits/36826/ credit to ThreatActor at CoreRed.com Software Link: https://www.exploit-db.com/apps/64215b82be8bb2e749f95fec5b51d3e4-FMCRSetup.exe Test...

Free MP3 CD Ripper 2.6 2.8 - .wav File Buffer Overflow (SEH)

Free MP3 CD Ripper 2.6 2.8 - .wav File Buffer Overflow SEH !/usr/bin/env perl original p0c https://www.exploit-db.com/exploits/36465/ credit to TUNISIAN CYBER however he was attemping to vanilla buffer overflow in fact it is SEH based exploit using the address 0x7C9D30D7 is limit the targets whic...

SuSE 11.3 Security Update : Mozilla Firefox (SAT Patch Number 10571)

Mozilla Firefox was updated to 31.6.0 ESR to fix five security issues. The following vulnerabilities have been fixed : - Miscellaneous memory safety hazards. MFSA 2015-30 / CVE-2015-0814 / CVE-2015-0815 - Use-after-free when using the Fluendo MP3 GStreamer plugin. MFSA 2015-31 / CVE-2015-0813 -...

thunderbird: multiple issues

CVE-2015-0801 same-origin bypass: Mozilla developer Olli Pettay reported that while investigating Mozilla Foundation Security Advisory 2015-28, he and Mozilla developer Boris Zbarsky found an alternate way to trigger a similar vulnerability. The previously reported flaw used an issue with SVG...

Updated iceape packages fix security vulnerabilities

Updated iceape packages fix security issues: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors. CVE-2015-0835...

Mozilla Firefox Arbitrary Code Execution Vulnerability (CNVD-2015-02207)

Mozilla Firefox is a web browser developed by the Mozilla Foundation in conjunction with the open source community. Mozilla Firefox has a security vulnerability. It allows attackers to construct malicious MP3 files and trick users into parsing them for arbitrary code execution or denial of servic...

Ubuntu 14.04 LTS : Thunderbird vulnerabilities (USN-2552-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2552-1 advisory. Olli Pettay and Boris Zbarsky discovered an issue during anchor navigations in some circumstances. If a user were tricked in to opening a specially craft...