Code injection

listmp3.c in libming 0.4.7 allows remote attackers to unspecified impact via a crafted mp3 file, which triggers an invalid left shift...

UBUNTU-CVE-2016-9266

listmp3.c in libming 0.4.7 allows remote attackers to unspecified impact via a crafted mp3 file, which triggers an invalid left shift...

UBUNTU-CVE-2016-9264

Buffer overflow in the printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service out-of-bounds read via a crafted mp3 file...

CVE-2016-9264

Buffer overflow in the printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service out-of-bounds read via a crafted mp3 file...

CVE-2016-9264

Buffer overflow in the printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service out-of-bounds read via a crafted mp3 file...

CVE-2016-9265

The printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mp3 file...

CVE-2016-9266

listmp3.c in libming 0.4.7 allows remote attackers to unspecified impact via a crafted mp3 file, which triggers an invalid left shift...

CVE-2016-9265

The printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mp3 file...

CVE-2016-9266

listmp3.c in libming 0.4.7 allows remote attackers to unspecified impact via a crafted mp3 file, which triggers an invalid left shift...

CVE-2016-9265

CVE-2016-9265 affects Libming 0.4.7. The vulnerability is in the printMP3Headers function (listmp3.c) that can be triggered by a crafted MP3 file, causing a divide-by-zero error and an application crash (DoS). Exploitation is via a specially crafted MP3; no other impact is stated. Public advisori...

CVE-2016-9266

CVE-2016-9266 affects libming 0.4.7, where listmp3.c allows a remote attacker to cause an invalid left shift via a crafted MP3 file. The vulnerability is described as having an unspecified impact in the initial report, but multiple connected sources document a fix in libming 0.4.8. Fedora advisor...

CVE-2016-9266: Undefined Security Weakness

listmp3.c in libming 0.4.7 allows remote attackers to unspecified impact via a crafted mp3 file, which triggers an invalid left shift...

CVE-2016-9265: Divide By Zero

The printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mp3 file...

Easy MOV Converter 1.4.24 - Local Buffer Overflow (SEH)

Easy MOV Converter 1.4.24 - Local Buffer Overflow SEH !/usr/bin/python Exploit Title : Easy MOV Converter - 'Enter User Name' Field SEH Overwrite POC Date : 12/03/2017 Exploit Author : Muhann4d Vendor Homepage : http://www.divxtodvd.net/ Software Link : http://www.divxtodvd.net/easymovconverter.e...

WordPress audio playlist functionality is affected by Cross-Site Scripting

Abstract Two Cross-Site Scripting vulnerabilities exists in the playlist functionality of WordPress. These issues can be exploited by convincing an Editor or Administrator into uploading a malicious MP3 file. Once uploaded the issues can be triggered by a Contributor or higher using the playlist...

WordPress 4.5.3 Audio Playlist Cross Site Scripting

------------------------------------------------------------------------ WordPress audio playlist functionality is affected by Cross-Site Scripting ------------------------------------------------------------------------ Yorick Koster, July 2016...

PT-2017-10033

Name of the Vulnerable Software and Affected Versions Libming version 0.4.7 Description The issue is related to a buffer overflow in the printMP3Headers function in listmp3.c, which allows remote attackers to cause a denial of service out-of-bounds read via a crafted mp3 file. Recommendations For...

Mp3splt Denial of Service Vulnerability

Mp3splt is a set of mp3 music cutting command line program. A security vulnerability exists in the 'freeoptions' function in the optionsmanager.c file in Mp3splt version 2.6.2. A remote attacker can exploit this vulnerability to cause a denial of service invalid release and crash with the help of...

PT-2017-10035

Name of the Vulnerable Software and Affected Versions libming version 0.4.7 Description The issue in libming allows remote attackers to have an unspecified impact via a crafted mp3 file. This occurs because the listmp3.c file triggers an invalid left shift when processing the malicious file...

Windows Exploit development tutorial series--stack injection a-vulnerability warning-the black bar safety net

! Foreword Welcome to the heap spray tutorial the first part. This Part I will introduce the IE under typical heap spray technique, the second part will introduce the precise injection and IE8 under UAF vulnerabilities. It is worth mentioning that, the stack injection is just a payload Delivery...