CVE-2015-6602

libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file, as demonstrated by an attack against use of libutils by libstagefright in Android 5.x...

CVE-2015-3876

libstagefright in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file...

Design/Logic Flaw

libstagefright in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file...

CVE-2015-3876

libstagefright in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file...

CVE-2015-6602

libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file, as demonstrated by an attack against use of libutils by libstagefright in Android 5.x...

Input validation

libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file, as demonstrated by an attack against use of libutils by libstagefright in Android 5.x...

CVE-2015-6602

CVE-2015-6602 concerns libutils in Android up to version 5.1.1 LMY48M. A crafted metadata payload in MP3/MP4 files can trigger memory corruption and remote code execution via the mediaserver pathway (through libstagefright). The issue is categorized as a Remote Code Execution vulnerability and is...

CVE-2015-6602

libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file, as demonstrated by an attack against use of libutils by libstagefright in Android 5.x...

CVE-2015-3876

libstagefright in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file...

CVE-2015-6602

libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file, as demonstrated by an attack against use of libutils by libstagefright in Android 5.x...

CVE-2015-3876

libstagefright in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file...

CVE-2015-6602

libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file, as demonstrated by an attack against use of libutils by libstagefright in Android 5.x...

CVE-2015-3876

CVE-2015-3876 is a vulnerability in Android's Stagefright libstagefright that could allow remote code execution by processing crafted MP3/MP4 media files. The Android bulletin documents this as part of a set of remote‑code‑execution issues in libstagefright, with affected versions including Andro...

PT-2015-2194

Name of the Vulnerable Software and Affected Versions Android versions through 5.1.1 LMY48M Description The issue allows remote attackers to execute arbitrary code via crafted metadata in a MP3 or MP4 file. This is due to insufficient input validation in the libutils library. Recommendations For...

PT-2015-2203

Name of the Vulnerable Software and Affected Versions Android versions through 5.1.1 LMY48M Description The issue exists due to insufficient input validation in the libstagefright library of the Android operating system. It allows a remote attacker to execute arbitrary code by using specially...

CVE-2015-6602: Improper Input Validation

libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file, as demonstrated by an attack against use of libutils by libstagefright in Android 5.x...

ASX to MP3 Converter 1.82.50 (Windows XP SP3) - .asx Local Stack Overflow

ASX to MP3 Converter 1.82.50 Windows XP SP3 - .asx Local Stack Overflow ''' Exploit Title: ASX to MP3 Converter 1.82.50 Stack Overflow Date: 2 Oct 2015 Exploit Author: exptr Vendor Homepage: http://mini-stream.net Version: 1.82.50 Tested on: Windows XP SP3 ''' import struct filename = "exploit.as...

CVE-2015-3876: Improper Input Validation

libstagefright in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file...

ASX to MP3 Converter 1.82.50 (Windows XP SP3) - '.asx' Local Stack Overflow

''' Exploit Title: ASX to MP3 Converter 1.82.50 Stack Overflow Date: 2 Oct 2015 Exploit Author: exptr Vendor Homepage: http://mini-stream.net Version: 1.82.50 Tested on: Windows XP SP3 ''' import struct filename = "exploit.asx" dummy = "A"0x104 EIP = struct.pack'I', 0x76af3adc FFFF =...

Stagefright2

Meet Stagefright 2.0, a set of two vulnerabilities that manifest when processing specially crafted MP3 audio or MP4 video files. The first vulnerability in libutils impacts almost every Android device since version 1.0 released in 2008. We found methods to trigger that vulnerability in devices...