CVE-2015-7243

Boxoft WAV to MP3 Converter is affected by CVE-2015-7243, a stack/SEH-based buffer overflow in the WAV to MP3 conversion process for versions 1.0 and 1.1. A crafted WAV file can trigger a crash and potentially allow remote code execution. Exploit paths are documented (Exploit-DB/Metasploit module...

Boxoft WAV to MP3 Converter - convert 特性缓冲区溢出

首先拿到poc，先看看，明显的溢出，利用的是SEH的结构 !/usr/bin/python using=utf-8 f = open"malicious.aiff", "w" f.write"A"4132 f.write"\xeb\x06\x90\x90"nseh f.write"\xa4\x43\x40\x00"seh Shellcode: windows/exec - 277 bytes CMD=calc.exe f.write"\x90"20 f.write"\xba\xd5\x31\x08\x38\xdb\xcb\xd9\x74\x24\xf4\x5b\x29\xc9\xb1"...

Boxoft WAV to MP3 Converter - convert Local Buffer Overflow

Boxoft WAV to MP3 Converter - convert Local Buffer Overflow Exploit Title: Boxoft wav to mp3 converter SEH bypass technique tested on Win7x64 Date: 8-31-2015 Software Link: http://www.boxoft.com/wav-to-mp3/ Exploit Author: Robbie Corley Contact: [email protected] Website: Target: Windows 7...

Boxoft WAV to MP3 Converter - 'convert' Local Buffer Overflow

Exploit Title: Boxoft wav to mp3 converter SEH bypass technique tested on Win7x64 Date: 8-31-2015 Software Link: http://www.boxoft.com/wav-to-mp3/ Exploit Author: Robbie Corley Contact: [email protected] Website: Target: Windows 7 Enterprise x64 CVE: Category: Local Exploit Description: A...

Boxoft WAV To MP3 Converter Buffer Overflow

Exploit Title: Boxoft wav to mp3 converter SEH bypass technique tested on Win7x64 Date: 8-31-2015 Software Link: http://www.boxoft.com/wav-to-mp3/ Exploit Author: Robbie Corley Contact: [email protected] Website: Target: Windows 7 Enterprise x64 CVE: Category: Local Exploit Description: A...

Boxoft WAV to MP3 Converter - convert Feature Buffer Overflow Exploit

Exploit for windows platform in category local exploits Exploit Title: Boxoft wav to mp3 converter SEH bypass technique tested on Win7x64 Date: 8-31-2015 Software Link: http://www.boxoft.com/wav-to-mp3/ Exploit Author: Robbie Corley Contact: email protected Website: Target: Windows 7 Enterprise x...

Boxoft WAV to MP3 Converter v1.1 Buffer Overflow

This module exploits a stack buffer overflow in Boxoft WAV to MP3 Converter versions 1.0 and 1.1. By constructing a specially crafted WAV file and attempting to convert it to an MP3 file in the application, a buffer is overwritten, which allows for running shellcode. Module Options msf use...

Xion Audio Player 1.5 build 155 - Stack Buffer Overflow

Xion Audio Player 1.5 build 155 - Stack Buffer Overflow Exploit Title: Xion Audio Player build 155 Stack Based BOF. Date: 8/19/2015 Exploit Author: UnN0n Software Vendor : http://www.xionplayer.com Software Link: http://www.xionplayer.com/page/download Version: 1.5 Build 155 Tested on: Windows 7...

USN-2702-3 firefox regression

USN-2702-1 fixed vulnerabilities in Firefox. After upgrading, some users in the US reported that their default search engine switched to Yahoo. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Gary Kwong, Christian Holler, Byron Campen, Tyson Smith,...

[SECURITY] Fedora 22 Update: icecast-2.4.2-1.fc22

Icecast is a streaming media server which currently supports Ogg Vorbis and MP3 audio streams. It can be used to create an Internet radio station or a privately running jukebox and many things in between. It is very versatile in that new formats can be added relatively easily and supports open...

[SECURITY] Fedora 21 Update: icecast-2.4.2-1.fc21

Icecast is a streaming media server which currently supports Ogg Vorbis and MP3 audio streams. It can be used to create an Internet radio station or a privately running jukebox and many things in between. It is very versatile in that new formats can be added relatively easily and supports open...

Adobe Flash Player Integer Overflow (APSB15-19: CVE-2015-5560)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an integer overflow condition in Adobe Flash Player. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted MP3 file...

Out-of-bounds

The mozilla::AudioSink function in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 mishandles inconsistent sample formats within MP3 audio data, which allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via a malformed file...

CVE-2015-4475

CVE-2015-4475 : Firefox before 40.0 (and ESR 38.x before 38.2) mishandles MP3 sample formats in mozilla::AudioSink, enabling remote arbitrary code execution or a denial of service via a malformed MP3 file. Affected product: Mozilla Firefox/Firefox ESR; root cause: inconsistency in MP3 sample form...

CVE-2015-4475

The mozilla::AudioSink function in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 mishandles inconsistent sample formats within MP3 audio data, which allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via a malformed file...

openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2015:1390-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS : Ubufox update (USN-2702-2)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2702-2 advisory. USN-2702-1 fixed vulnerabilities in Firefox. This update provides the corresponding updates for Ubufox. Tenable has extracted the preceding description block...

Mozilla: Out-of-bounds read with malformed MP3 file (MFSA 2015-80)

The mozilla::AudioSink function in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 mishandles inconsistent sample formats within MP3 audio data, which allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via a malformed file...

USN-2702-2 ubufox update

USN-2702-1 fixed vulnerabilities in Firefox. This update provides the corresponding updates for Ubufox. Original advisory details: Gary Kwong, Christian Holler, Byron Campen, Tyson Smith, Bobby Holley, Chris Coulson, and Eric Rahm discovered multiple memory safety issues in Firefox. If a user wer...

Out-of-bounds read with malformed MP3 file — Mozilla

Security researcher Aki Helin used the Address Sanitizer tool to discover an out-of-bounds read during playback of a malformed MP3 format audio file which switches sample formats. This could trigger a potentially exploitable crash or the reading of out-of-bounds memory content in some circumstanc...