CVE-2019-5618

The CVE-2019-5618 entry concerns A-PDF WAV to MP3 version 1.0.0. Multiple connected sources confirm a CWE-121 stack-based buffer overflow vulnerability arising from memory operations without proper data boundary validation on this product. Affected component: the WAV->MP3 conversion tool (vers...

DEBIAN-CVE-2020-9489

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika users should upgrade ...

Dark web scammers selling ventilators & MP3 files to kill Coronavirus

By Sudais Asif Dark web cybercriminals now claim to get your coronavirus infection cured by listening to the MP3 files they are selling. This is a post from HackRead.com Read the original post: Dark web scammers selling ventilators & MP3 files to kill Coronavirus...

mp3.kruta.de Open Redirect vulnerability

Open Bug Bounty ID: OBB-1146078 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting mp3.kruta.de website and its users. Following...

Streaming issues that are related to Microsoft Media Foundation in Windows 7

Streaming issues that are related to Microsoft Media Foundation in Windows 7 Symptoms A hotfix is available for Microsoft Media Foundation in Windows 7. This hotfix resolves the following streaming issues that relate to Media Foundation: Issue 1 You cannot stream some audio files to multiple...

Easy RM to MP3 Converter 2.7.3.700 - (Input) Local Buffer Overflow (SEH) Exploit

Exploit Title: Easy RM to MP3 Converter 2.7.3.700 - 'Input' Local Buffer Overflow SEH Author: Felipe Winsnes Software Link: https://www.exploit-db.com/apps/707414955696c57b71c7f160c720bed5-EasyRMtoMP3Converter.exe Version: 2.7.3.700 Tested on: Windows 7 x86 Proof of Concept: 1.- Run the python...

Easy RM to MP3 Converter 2.7.3.700 - Input Local Buffer Overflow (SEH)

Easy RM to MP3 Converter 2.7.3.700 - Input Local Buffer Overflow SEH Exploit Title: Easy RM to MP3 Converter 2.7.3.700 - 'Input' Local Buffer Overflow SEH Date: 2020-03-26 Author: Felipe Winsnes Software Link: https://www.exploit-db.com/apps/707414955696c57b71c7f160c720bed5-EasyRMtoMP3Converter.e...

Easy RM to MP3 Converter 2.7.3.700 - 'Input' Local Buffer Overflow (SEH)

Exploit Title: Easy RM to MP3 Converter 2.7.3.700 - 'Input' Local Buffer Overflow SEH Date: 2020-03-26 Author: Felipe Winsnes Software Link: https://www.exploit-db.com/apps/707414955696c57b71c7f160c720bed5-EasyRMtoMP3Converter.exe Version: 2.7.3.700 Tested on: Windows 7 x86 Proof of Concept: 1.-...

MGASA-2020-0045 Updated sox packages fix security vulnerabilities

Updated sox packages fix security vulnerabilities: It was discovered that SoX incorrectly handled certain MP3 files. An attacker could possibly use this issue to cause a denial of service. CVE-2019-8354, CVE-2019-8355, CVE-2019-8356, CVE-2019-8357...

Updated sox packages fix security vulnerabilities

Updated sox packages fix security vulnerabilities: It was discovered that SoX incorrectly handled certain MP3 files. An attacker could possibly use this issue to cause a denial of service. CVE-2019-8354, CVE-2019-8355, CVE-2019-8356, CVE-2019-8357...

CVE-2019-15971

A vulnerability in the MP3 detection engine of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass configured content filters on the device. The vulnerability is due to improper validation of certain MP3 file types. An attacker...

CVE-2019-15971

A vulnerability in the MP3 detection engine of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass configured content filters on the device. The vulnerability is due to improper validation of certain MP3 file types. An attacker...

Input validation

A vulnerability in the MP3 detection engine of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass configured content filters on the device. The vulnerability is due to improper validation of certain MP3 file types. An attacker...

CVE-2019-15971 Cisco Email Security Appliance MP3 Content Filter Bypass Vulnerability

A vulnerability in the MP3 detection engine of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass configured content filters on the device. The vulnerability is due to improper validation of certain MP3 file types. An attacker...

CVE-2019-15971 Cisco Email Security Appliance MP3 Content Filter Bypass Vulnerability

A vulnerability in the MP3 detection engine of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass configured content filters on the device. The vulnerability is due to improper validation of certain MP3 file types. An attacker...

Free MP3 CD Ripper 2.8 Buffer Overflow

Exploit Title: Free MP3 CD Ripper 2.8 - '.mp3' Structured Exception Handler Buffer Overflow '.mp3 file' Author" Malav Vyas Tweeter @malavvyas1 Tested on Windows xp SP3 English Tested Version - 2.8 build 20140611 Steps: Run the script it will generate exploit.mp3 file. Run Free MP3 CD Ripper 2.8 o...

Free MP3 CD Ripper 2.8 Buffer Overflow / Denial Of Service

Exploit Title : Free MP3 CD Ripper 2.8 Buffer Overflow DOS Date: 23-08-2019 Vulnerable Software: FREE MP3 CD RIPPER 2.8 Build 20140611 Vendor Home Page: www.cleanersoft.com/ Software Link: www.cleanersoft.com/cdripper/freecdripper.html Tested On: Windows 7 64Bit Attack Type : Denial of Service...

Cisco Email Security Appliance MP3 Content Filter Bypass Vulnerability

A vulnerability in the MP3 detection engine of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass configured content filters on the device. The vulnerability is due to improper validation of certain MP3 file types. An attacker...

MP3Gain Buffer Overflow Vulnerability (CNVD-2019-39532)

MP3Gain is an audio volume control application. A buffer overflow vulnerability exists in the 'ReadMP3APETag' function of the apetag.c file in MP3Gain version 1.6.2, which originates when a networked system or product performs an operation in memory without properly validating the data boundaries...

ASX to MP3 converter 3.1.3.7 - .asx Local Stack Overflow (Metasploit_ DEP Bypass)

ASX to MP3 converter 3.1.3.7 - .asx Local Stack Overflow Metasploit DEP Bypass This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule "ASX to MP3 converter 3.1.3.7 - '.asx' Local Sta...