CVE-2009-2499

Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows Vista Gold, SP1, and SP2 and Server 2008; allows remote attackers to execute arbitrary code via an MP3 file with crafted metadata that triggers memory corruption, aka "Windows Media Playback Memory...

Unfixed XSS vulnerability at mp3.soundquake.com

Security researcher tenest, has submitted on 09/08/2009 a cross-site-scripting XSS vulnerability affecting mp3.soundquake.com, which at the time of submission ranked 2308393 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is...

Microsoft Windows Media Format MP3 Metadata Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability that arises when an affected Windows component handles a malicious MP3 file. Successful exploits may allow attackers to execute arbitrary code with the privileges of the currently logged-in user. Failed attacks will...

Microsoft Windows MP3 File Media Playback Memory Corruption (MS09-047; CVE-2009-2499)

MPEG-1 Audio Layer 3 MP3 is a file format which uses lossy compression to compress audio information. A remote code execution vulnerability has been reported in the way Microsoft Windows handles specially crafted MP3 media files. The vulnerability is due the Windows component responsible for...

CVE-2009-2499: Improper Control of Generation of Code

Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows Vista Gold, SP1, and SP2 and Server 2008; allows remote attackers to execute arbitrary code via an MP3 file with crafted metadata that triggers memory corruption, aka "Windows Media Playback Memory...

MS09-047: Vulnerabilities in Windows Media Format Could Allow Remote Code Execution (973812)

The remote Windows host contains a version of the Windows Media Format Runtime or Windows Media Services that is affected by multiple vulnerabilities : - The ASF parser has an invalid free vulnerability. A remote attacker could exploit this by tricking a user into opening a specially crafted ASF...

Soritong MP3 Player 1.0 (.m3u//UI.txt) Universal Local BOF Exploits

No description provided by source. !/usr/bin/perl by hack4love [email protected] Soritong MP3 Player 1.0 .m3u//UI.txt Universal Local BOF SEH Original exploit:::http://www.milw0rm.com/exploits/8624 by Stack m3u file my $bof="\x41" x 260; my $nsh="\xEB\x06\x90\x90"; my...

Soritong MP3 Player 1.0 - .m3u UI.txt Universal Local Buffer Overflow

Soritong MP3 Player 1.0 - .m3u UI.txt Universal Local Buffer Overflow !/usr/bin/perl by hack4love [email protected] Soritong MP3 Player 1.0 .m3u//UI.txt Universal Local BOF SEH Original exploit:::http://www.milw0rm.com/exploits/8624 by Stack m3u file my $bof="\x41" x 260; my...

Soritong MP3 Player 1.0 (.m3u//UI.txt) Universal Local BOF Exploits

Exploit for unknown platform in category local exploits =================================================================== Soritong MP3 Player 1.0 .m3u//UI.txt Universal Local BOF Exploits =================================================================== !/usr/bin/perl by hack4love Soritong MP...

Soritong MP3 Player 1.0 - '.m3u' / UI.txt Universal Local Buffer Overflow

!/usr/bin/perl by hack4love [email protected] Soritong MP3 Player 1.0 .m3u//UI.txt Universal Local BOF SEH Original exploit:::http://www.milw0rm.com/exploits/8624 by Stack m3u file my $bof="\x41" x 260; my $nsh="\xEB\x06\x90\x90"; my $seh="\x47\x30\x01\x10";Player.dll my $nop="\x90" x 2000; m...

x10 MP3 Automatic Search Engine 1.6.5b - embed.php?name Cross-Site Scripting

x10 MP3 Automatic Search Engine 1.6.5b - embed.php?name Cross-Site Scripting source: https://www.securityfocus.com/bid/43336/info x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker...

x10 MP3 Automatic Search Engine 1.6.5 - linkvideos_listing.php?category Cross-Site Scripting

x10 MP3 Automatic Search Engine 1.6.5 - linkvideoslisting.php?category Cross-Site Scripting source: https://www.securityfocus.com/bid/43336/info x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied inpu...

x10 MP3 Automatic Search Engine 1.6.5b - templatesheader1.php?id Cross-Site Scripting

x10 MP3 Automatic Search Engine 1.6.5b - templatesheader1.php?id Cross-Site Scripting source: https://www.securityfocus.com/bid/43336/info x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An...

x10 MP3 Automatic Search Engine 1.6.5b - video_listing.php?key Cross-Site Scripting

x10 MP3 Automatic Search Engine 1.6.5b - videolisting.php?key Cross-Site Scripting source: https://www.securityfocus.com/bid/43336/info x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An...

x10 MP3 Automatic Search Engine 1.6.5b - 'info.php?name' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43336/info x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of ...

x10 MP3 Automatic Search Engine 1.6.5 - 'linkvideos_listing.php?category' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43336/info x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of ...

x10 MP3 Automatic Search Engine 1.6.5b - 'embed.php?name' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43336/info x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of ...

x10 MP3 Automatic Search Engine 1.6.5 - '/includes/video_ad.php?pic_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43336/info x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of ...

x10 MP3 Automatic Search Engine 1.6.5b - '/templates/header1.php?id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43336/info x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of ...

x10 MP3 Automatic Search Engine 1.6.5b - 'video_listing.php?key' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43336/info x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of ...