Lucene search
+L

2460 matches found

securityvulns
securityvulns
added 2005/06/28 12:0 a.m.31 views

High Risk Vulnerability in RealPlayer for Windows

John Heasman of NGSSoftware has discovered a high risk vulnerability in RealPlayer for Windows. Versions affected include: RealPlayer 10.5 6.0.12.1040-1069 RealPlayer 10 RealOne Player v2 RealOne Player v1 RealPlayer 10.5 6.0.12.1212 is NOT affected. The flaw permits the overwriting of a local fi...

0.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2005/06/24 12:0 a.m.32 views

RealPlayer / RealOne Player for Windows Multiple Vulnerabilities (2005-06-23)

According to its build number, the installed version of RealPlayer / RealOne Player for Windows has several vulnerabilities : - A malicious MP3 file can be used to overwrite an arbitrary file or execute an ActiveX control. - Using a specially crafted RealMedia file, an attacker may be able to cau...

5.1CVSS6.2AI score0.04105EPSS
SaveExploits0References6
securityvulns
securityvulns
added 2005/03/28 12:0 a.m.33 views

mpg321 MP3 player ID3 tags format string vulnerability

Format string bug on IDv3 tags processing...

2AI score
SaveExploits0References1Affected Software1
CVE
CVE
added 2005/03/10 5:0 a.m.42 views

CVE-2003-1091

CVE-2003-1091 : Integer overflow in MP3Broadcaster for Apple QuickTime/Darwin Streaming Server 4.1.3 allows remote attackers to cause a denial of service (crash) and potentially execute arbitrary code via malformed ID3 tags in MP3 files. Affected: MP3Broadcaster component within the QuickTime/Dar...

7.5CVSS8.2AI score0.06391EPSS
SaveExploits2References5
UbuntuCve
UbuntuCve
added 2005/02/09 5:0 a.m.22 views

CVE-2004-0982

Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote attackers or local users to execute arbitrary code via an mp3 file that contains a long string before the @ at sign in a URL...

10CVSS6.3AI score0.06527EPSS
SaveExploits0References1
NVD
NVD
added 2005/02/09 5:0 a.m.18 views

CVE-2004-0982

Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote attackers or local users to execute arbitrary code via an mp3 file that contains a long string before the @ at sign in a URL...

10CVSS7.4AI score0.06527EPSS
SaveExploits0References9
Cvelist
Cvelist
added 2005/01/19 5:0 a.m.33 views

CVE-2004-0991

Buffer overflow in mpg123 before 0.59s-r9 allows remote attackers to execute arbitrary code via frame headers in MP2 or MP3 files...

7.6AI score0.03584EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2005/01/19 5:0 a.m.46 views

CVE-2004-0991

Buffer overflow in mpg123 before 0.59s-r9 allows remote attackers to execute arbitrary code via frame headers in MP2 or MP3 files...

7.5CVSS7.6AI score0.03584EPSS
SaveExploits0
NVD
NVD
added 2005/01/11 5:0 a.m.24 views

CVE-2004-0991

Buffer overflow in mpg123 before 0.59s-r9 allows remote attackers to execute arbitrary code via frame headers in MP2 or MP3 files...

7.5CVSS7.7AI score0.03584EPSS
SaveExploits0References6
OSV
OSV
added 2005/01/11 5:0 a.m.9 views

CVE-2004-0991

Buffer overflow in mpg123 before 0.59s-r9 allows remote attackers to execute arbitrary code via frame headers in MP2 or MP3 files...

7.7AI score
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2005/01/11 5:0 a.m.22 views

CVE-2004-0991

Buffer overflow in mpg123 before 0.59s-r9 allows remote attackers to execute arbitrary code via frame headers in MP2 or MP3 files...

7.5CVSS6.3AI score0.03584EPSS
SaveExploits0References1
OSV
OSV
added 2005/01/11 5:0 a.m.3 views

DEBIAN-CVE-2004-0991

Buffer overflow in mpg123 before 0.59s-r9 allows remote attackers to execute arbitrary code via frame headers in MP2 or MP3 files...

7.5CVSS8AI score0.03584EPSS
SaveExploits0References1
OSV
OSV
added 2005/01/10 5:0 a.m.14 views

CVE-2004-1284

Buffer overflow in the findnextfile function in playlist.c for mpg123 0.59r allows remote attackers to execute arbitrary code via a crafted MP3 playlist...

7.6AI score
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2005/01/10 5:0 a.m.23 views

CVE-2004-1284

Buffer overflow in the findnextfile function in playlist.c for mpg123 0.59r allows remote attackers to execute arbitrary code via a crafted MP3 playlist...

10CVSS6.4AI score0.14458EPSS
SaveExploits2References1
NVD
NVD
added 2005/01/10 5:0 a.m.34 views

CVE-2004-1284

Buffer overflow in the findnextfile function in playlist.c for mpg123 0.59r allows remote attackers to execute arbitrary code via a crafted MP3 playlist...

10CVSS7.7AI score0.14458EPSS
SaveExploits2References3
FreeBSD
FreeBSD
added 2005/01/01 12:0 a.m.30 views

mpg123 -- buffer overflow vulnerability

Yuri D'Elia has found a buffer overflow vulnerability in mpg123's parsing of frame headers in input streams. This vulnerability can potentially lead to execution of arbitrary code with the permissions of the user running mpg123, if the user runs mpg123 on a specially crafted MP2 or MP3 file...

7.5CVSS7.1AI score0.03584EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2004/12/23 5:0 a.m.26 views

CVE-2004-0805

Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg123 0.59s allows remote attackers to execute arbitrary code via a certain 1 mp3 or 2 mp2 file...

7.5CVSS6.4AI score0.03786EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2004/12/22 5:0 a.m.40 views

CVE-2004-1284

Buffer overflow in the findnextfile function in playlist.c for mpg123 0.59r allows remote attackers to execute arbitrary code via a crafted MP3 playlist...

7.5AI score0.14458EPSS
SaveExploits2References3
CVE
CVE
added 2004/12/22 5:0 a.m.57 views

CVE-2004-1284

CVE-2004-1284 describes a buffer overflow in mpg123 0.59r’s find_next_file() inside playlist.c that lets a remote attacker execute arbitrary code via a crafted MP3 playlist. The issue is confirmed across several databases (NVD, SUSE, FreeBSD/OpenVAS/Nessus plugins, OSV) with CVSSv2 base score 10....

10CVSS7.6AI score0.14458EPSS
SaveExploits2References3Affected Software1
Cvelist
Cvelist
added 2004/12/22 5:0 a.m.31 views

CVE-2004-1302

The id3tagsort function in id3tag.c for YAMT 0.5 allows remote attackers to execute arbitrary commands via an MP3 file with double quotes in the Artist tag...

7.5AI score0.03817EPSS
SaveExploits1References6
Rows per page
Query Builder