2459 matches found
CVE-2006-0787
CVE-2006-0787 affects Plaino Wimpy MP3 Player (likely
Wimpy MP3 Player 5 - Text File Overwrite
source: https://www.securityfocus.com/bid/16696/info Wimpy MP3 is prone to a weakness that permits the overwriting of a text file with arbitrary attacker-supplied data. Successful exploitation of this issue may aid an attacker in further attacks. The following proof of concept URI is available:...
[Full-disclosure] Wimpy MP3 Player - Text file overwrite vulnerability
======================================================================================= XOR Crew :: Security Advisory 2/10/2006 ======================================================================================= Wimpy MP3 Player - Text file overwrite. lame...
Wimpy MP3 Player 5 - Text File Overwrite
Wimpy MP3 Player 5 - Text File Overwrite source: https://www.securityfocus.com/bid/16696/info Wimpy MP3 is prone to a weakness that permits the overwriting of a text file with arbitrary attacker-supplied data. Successful exploitation of this issue may aid an attacker in further attacks. The...
CVE-2005-3999
Cross-site scripting XSS vulnerability in Search.asp in SiteBeater MP3 Catalog 2.03 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...
CVE-2005-3999
Cross-site scripting XSS vulnerability in Search.asp in SiteBeater MP3 Catalog 2.03 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...
CVE-2005-3999
The CVE-2005-3999 entry describes a reflected XSS in SiteBeater MP3 Catalog (version 2.03 and earlier) via the Search.asp page, where unspecified parameters can be injected with arbitrary script/HTML. This vulnerability enables remote attackers to execute script in a victim’s browser. The availab...
SiteBeater MP3 Catalog XSS vuln
SiteBeater MP3 Catalog XSS vuln Vuln. dicovered by : r0t Date: 3 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/sitebeater-mp3-catalog-xss-vuln.html vendor:http://www.sitebeater.com/Radio/ affected version: 2.03 and prior Product Description: MP3 upload, lightning fast ID3 tag...
[SECURITY] [DSA 901-1] New gnump3d packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 901-1 [email protected] http://www.debian.org/security/ Martin Schulze November 19th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 877-1] New gnump3d packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 877-1 [email protected] http://www.debian.org/security/ Martin Schulze October 28th, 2005 http://www.debian.org/security/faq -...
Multiple gnump3d MP3 streaming server (multiple vulnerabilities)
Crossite scriptin, directory travrsal...
DSA-877-1 gnump3d - cross-site-scripting, directory traversal
Bulletin has no description...
CVE-2005-2310
Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arbitrary code via an MP3 file with a long ID3v2 tag such as 1 ARTIST or 2 TITLE...
CVE-2005-2310
Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arbitrary code via an MP3 file with a long ID3v2 tag such as 1 ARTIST or 2 TITLE...
Winamp < 5.093 Malformed ID3v2 Tag Handling Buffer Overflow
The remote host is using Winamp, a popular media player for Windows. The installed version of Winamp suffers from a buffer overflow vulnerability when processing overly-long ID3v2 tags in an MP3 file. An attacker may be able to exploit this flaw to execute arbitrary code on the remote host...
WinAmp MP3 files ID3v2 tags buffer overflow
Buffer overflow on oversized ID3v2 tag fields...
[Full-disclosure] LSS Security Advisory: Winamp remote buffer overflow vulnerability
LSS Security Advisory LSS-2005-07-14 http://security.lss.hr Title: Winamp remote buffer overflow vulnerability Advisory ID: LSS-2005-07-14 Date: 2005-07-14 Advisory URL: http://security.lss.hr/index.php?page=details&ID=LSS-2005-07-14 Impact: Remote and local code execution Risk Level: High...
CVE-2005-2054
Unknown vulnerability in RealPlayer 10 and 10.5 6.0.12.1040-1069 and RealOne Player v1 and v2 allows remote attackers to overwrite arbitrary files or execute arbitrary ActiveX controls via a crafted MP3 file...
CVE-2005-2054
Unknown vulnerability in RealPlayer 10 and 10.5 6.0.12.1040-1069 and RealOne Player v1 and v2 allows remote attackers to overwrite arbitrary files or execute arbitrary ActiveX controls via a crafted MP3 file...
High Risk Vulnerability in RealPlayer for Windows
John Heasman of NGSSoftware has discovered a high risk vulnerability in RealPlayer for Windows. Versions affected include: RealPlayer 10.5 6.0.12.1040-1069 RealPlayer 10 RealOne Player v2 RealOne Player v1 RealPlayer 10.5 6.0.12.1212 is NOT affected. The flaw permits the overwriting of a local fi...