CVE-2006-2230

Multiple format string vulnerabilities in xiTK xitk/main.c in xine 0.99.4 might allow attackers to cause a denial of service via format string specifiers in an MP3 filename specified on the command line. NOTE: this is a different vulnerability than CVE-2006-1905. In addition, if the only attack...

CVE-2006-2021

Absolute path traversal vulnerability in recordings/misc/audio.php in the Asterisk Recording Interface ARI web interface in Asterisk@Home before 2.8 allows remote attackers to read arbitrary MP3, WAV, and GSM files via a full pathname in the recording parameter. NOTE: this issue can also be used ...

CVE-2006-2021

Absolute path traversal vulnerability in recordings/misc/audio.php in the Asterisk Recording Interface ARI web interface in Asterisk@Home before 2.8 allows remote attackers to read arbitrary MP3, WAV, and GSM files via a full pathname in the recording parameter. NOTE: this issue can also be used ...

Asterisk Recording Interface 0.7.15 - 'Audio.php' Information Disclosure

source: https://www.securityfocus.com/bid/17641/info Asterisk Recording Interface is prone to an information-disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary MP3,...

Asterisk Recording Interface 0.7.15 - Audio.php Information Disclosure

Asterisk Recording Interface 0.7.15 - Audio.php Information Disclosure source: https://www.securityfocus.com/bid/17641/info Asterisk Recording Interface is prone to an information-disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input...

CVE-2006-1655

Multiple buffer overflows in mpg123 0.59r allow user-assisted attackers to trigger a segmentation fault and possibly have other impacts via a certain MP3 file, as demonstrated by mpg1DoS3. NOTE: this issue might be related to CVE-2004-0991, but it is not clear...

CVE-2006-1655

Multiple buffer overflows in mpg123 0.59r allow user-assisted attackers to trigger a segmentation fault and possibly have other impacts via a certain MP3 file, as demonstrated by mpg1DoS3. NOTE: this issue might be related to CVE-2004-0991, but it is not clear...

Buffer overflow

Multiple buffer overflows in mpg123 0.59r allow user-assisted attackers to trigger a segmentation fault and possibly have other impacts via a certain MP3 file, as demonstrated by mpg1DoS3. NOTE: this issue might be related to CVE-2004-0991, but it is not clear...

DEBIAN-CVE-2006-1655

Multiple buffer overflows in mpg123 0.59r allow user-assisted attackers to trigger a segmentation fault and possibly have other impacts via a certain MP3 file, as demonstrated by mpg1DoS3. NOTE: this issue might be related to CVE-2004-0991, but it is not clear...

CVE-2006-1655

Multiple buffer overflows in mpg123 0.59r allow user-assisted attackers to trigger a segmentation fault and possibly have other impacts via a certain MP3 file, as demonstrated by mpg1DoS3. NOTE: this issue might be related to CVE-2004-0991, but it is not clear...

CVE-2006-1655

Multiple buffer overflows in mpg123 0.59r allow user-assisted attackers to trigger a segmentation fault and possibly have other impacts via a certain MP3 file, as demonstrated by mpg1DoS3. NOTE: this issue might be related to CVE-2004-0991, but it is not clear...

CVE-2006-1655

Multiple buffer overflows in mpg123 0.59r allow user-assisted attackers to trigger a segmentation fault and possibly have other impacts via a certain MP3 file, as demonstrated by mpg1DoS3. NOTE: this issue might be related to CVE-2004-0991, but it is not clear...

CVE-2006-1655

CVE-2006-1655 concerns mpg123 with version 0.59r suffering multiple buffer overflows caused by insufficient validation of MPEG 2.0 Layer 3 files. The vulnerability can trigger a segmentation fault and potentially allow other impacts via a specially crafted MP3 file (as illustrated by mpg1DoS3). P...

mpg123 0.59r Malformed mp3 (SIGSEGV) Proof of Concept

No description provided by source. !/usr/bin/perl Affected product: mpg123-0.59r - http://mpg123.de I'm not sure what kind of vulnerability is it, but the program receives a SIGSEGV when I play it. My gdb skillz r p00r, but anybody with more experience than me can find the real bug. $./mpg1DoS3 0...

mpg123 0.59r Malformed mp3 (SIGSEGV) Proof of Concept

Exploit for linux platform in category dos / poc ===================================================== mpg123 0.59r Malformed mp3 SIGSEGV Proof of Concept ===================================================== !/usr/bin/perl Affected product: mpg123-0.59r - http://mpg123.de I'm not sure what kind ...

mpg123 0.59r - Malformed .mp3 (SIGSEGV) (PoC)

mpg123 0.59r - Malformed .mp3 SIGSEGV PoC !/usr/bin/perl Affected product: mpg123-0.59r - http://mpg123.de I'm not sure what kind of vulnerability is it, but the program receives a SIGSEGV when I play it. My gdb skillz r p00r, but anybody with more experience than me can find the real bug...

mpg123 0.59r - Malformed .mp3 (SIGSEGV) (PoC)

!/usr/bin/perl Affected product: mpg123-0.59r - http://mpg123.de I'm not sure what kind of vulnerability is it, but the program receives a SIGSEGV when I play it. My gdb skillz r p00r, but anybody with more experience than me can find the real bug. $./mpg1DoS3 0 | mpg123 - - switch tells mpg123 t...

XOR-Wimpy.txt

------=Part356113171861.1140054915207 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=...

CVE-2006-0787

wimpytrackplays.php in Plaino Wimpy MP3 Player, possibly 5.2 and earlier, allows remote attackers to insert arbitrary strings into trackme.txt via the 1 trackFile, 2 trackArtist, and 3 trackTitle parameters, which can result in providing false information about songs, occupying excessive disk spa...

CVE-2006-0787

wimpytrackplays.php in Plaino Wimpy MP3 Player, possibly 5.2 and earlier, allows remote attackers to insert arbitrary strings into trackme.txt via the 1 trackFile, 2 trackArtist, and 3 trackTitle parameters, which can result in providing false information about songs, occupying excessive disk spa...