2777 matches found
PT-2013-2781
Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.4 Description A buffer overflow issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted MP3 file. Recommendations For versions prior to 7.7.4, update to version...
CVE-2013-0989: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MP3 file...
Downloadify Allowed Songs to be Downloaded for Free
One of the largest online music streaming services was briefly singing a different tune after learning a new Google Chrome plug-in allowed users to download copies of songs for free. Google this week pulled from its Chrome Web Store the browser extension known as Downloadify, which exploited a...
SA-CONTRIB-2013-043 - MP3 Player - Cross Site Scripting (XSS)
This module enables you to easily enable a Flash MP3 Player on a CCK FileField. The module doesn't sufficiently filter user-supplied text from mp3 filenames. This vulnerability is mitigated by the fact that an attacker must have a role with the permission to create a node with an mp3 filefield wi...
Dotclear 2.4.4 Cross Site Scripting / Content Spoofing
Hello list! These are Cross-Site Scripting and Content Spoofing vulnerabilities in Dotclear. CMS Dotclear has three vulnerable flash-files: swfupload.swf, playerflv.swf and playermp3.swf. File swfupload.swf it's Swfupload. I've wrote about vulnerabilities in Swfupload in November 2012...
CVE-2013-1911
lib/ldoce/word.rb in the ldoce 0.0.2 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in 1 an mp3 URL or 2 file name...
VirtualDJ ProHome 7.3 - Local Buffer Overflow
VirtualDJ ProHome 7.3 - Local Buffer Overflow Exploit Title: VirtualDJ Pro/Home =7.3 Buffer Overflow Vulnerability Date: 23.03.2013 Exploit Author: Alexandro Sánchez Bach functionmixer.blogspot.com Vendor Homepage: http://www.virtualdj.com/ Software Link:...
Ruby Gem ldoce 0.0.2 Command Execution Vulnerability
Ruby Gem ldoce version 0.0.2 suffers from a command execution vulnerability. Remote command execution in Ruby Gem ldoce 0.0.2 Larry W. Cashdollar @larry0 3/25/2013 Ldoce Ruby Gem: Easily interface with the Longman Dictionary of Contemporary English API from Ruby: NB currently mac only as it depen...
ldoce Gem for Ruby MP3 URL Shell Metacharacter Injection Arbitrary Command Execution
ldoce Gem for Ruby contains a flaw that is triggered during the handling of a specially crafted URL or filename for MP3 files that have shell metacharacters injected in to it. This may allow a context-dependent attacker to execute arbitrary commands...
IconCool MP3 WAV Converter 3.00 Build 120518 Buffer Overflow
Exploit Title: IconCool MP3 WAV Converter Stack Buffer Overflow Vulnerability Date: 3/24/2013 Exploit Author: G0li47h Vendor Homepage: http://www.iconcool.com Software Link: http://www.iconcool.com/insticoncoolmp3wavconverter.exe Version: v3.00 Build 120518 Tested on: Windows 7 SP1 my $file=...
IconCool MP3 WAV Converter 3.00 Build 120518 - Stack Buffer Overflow
IconCool MP3 WAV Converter 3.00 Build 120518 - Stack Buffer Overflow Exploit Title: IconCool MP3 WAV Converter Stack Buffer Overflow Vulnerability Date: 3/24/2013 Exploit Author: G0li47h Vendor Homepage: http://www.iconcool.com Software Link: http://www.iconcool.com/insticoncoolmp3wavconverter.ex...
IconCool MP3 WAV Converter 3.00 Build 120518 - Stack Buffer Overflow Vulnerability
Exploit for windows platform in category dos / poc Exploit Title: IconCool MP3 WAV Converter Stack Buffer Overflow Vulnerability Date: 3/24/2013 Exploit Author: G0li47h Vendor Homepage: http://www.iconcool.com Software Link: http://www.iconcool.com/insticoncoolmp3wavconverter.exe Version: v3.00...
IconCool MP3 WAV Converter 3.00 Build 120518 - Stack Buffer Overflow
Exploit Title: IconCool MP3 WAV Converter Stack Buffer Overflow Vulnerability Date: 3/24/2013 Exploit Author: G0li47h Vendor Homepage: http://www.iconcool.com Software Link: http://www.iconcool.com/insticoncoolmp3wavconverter.exe Version: v3.00 Build 120518 Tested on: Windows 7 SP1 my $file=...
Shrimp net free download any music, Super simple! - Vulnerability warning-the black bar safety net
Brief description: Shrimp network is to provide high quality Music MP3 personalized recommendation, publish, P2P download services, including APE format music. Love music, love found, love to share, so like life. Shrimp on the music of thought and attitude is like! Detailed description: In shrimp...
TagScanner 5.1 - Stack Buffer Overflow (PoC)
Title: ====== TagScanner v5.1 - Stack Buffer Overflow Vulnerability Date: ===== 2013-01-22 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=831 VL-ID: ===== 831 Introduction: ============= TagScanner is a multifunction program for organizing and managing your music...
WordPress Audio Player SWF Cross Site Scripting
Exploit Title: Wordpress Audio Player Plugin XSS in SWF Release Date: 31/01/13 Author: hip Insight-Labs Contact: [email protected] | Website: http://insight-labs.org Software Link: http://downloads.wordpress.org/plugin/audio-player.2.0.4.6.zip Vendor Homepage: http://wpaudioplayer.com/ Tested...
Free WMA to MP3 converter 1.6 - Local buffer overflow [SEH]
Exploit for windows platform in category local exploits !/usr/bin/python -w In the name of allah Title : Local buffer overflow - SEH Infected program: Free WMA to MP3 converter 1.6 Date: 30/11/2012 Exploit Author: R3ZN0V Software : www.eusing.com Download Link:...
Free WMA to MP3 converter v1.6 - Local buffer overflow (SEH)
Exploit for windows platform in category local exploits !/usr/bin/python -w In the name of allah Title : Local buffer overflow - SEH Infected program: Free WMA to MP3 converter 1.6 Date: 30/11/2012 Exploit Author: R3ZN0V Software : www.eusing.com Download Link:...
