Wimpy MP3 Player 5 - Text File Overwrite

source: https://www.securityfocus.com/bid/16696/info Wimpy MP3 is prone to a weakness that permits the overwriting of a text file with arbitrary attacker-supplied data. Successful exploitation of this issue may aid an attacker in further attacks. The following proof of concept URI is available:...

CVE-2005-3999

Cross-site scripting XSS vulnerability in Search.asp in SiteBeater MP3 Catalog 2.03 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2005-3999

The CVE-2005-3999 entry describes a reflected XSS in SiteBeater MP3 Catalog (version 2.03 and earlier) via the Search.asp page, where unspecified parameters can be injected with arbitrary script/HTML. This vulnerability enables remote attackers to execute script in a victim’s browser. The availab...

CVE-2005-3999

Cross-site scripting XSS vulnerability in Search.asp in SiteBeater MP3 Catalog 2.03 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2005-3999: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Search.asp in SiteBeater MP3 Catalog 2.03 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

SiteBeater MP3 Catalog XSS vuln

SiteBeater MP3 Catalog XSS vuln Vuln. dicovered by : r0t Date: 3 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/sitebeater-mp3-catalog-xss-vuln.html vendor:http://www.sitebeater.com/Radio/ affected version: 2.03 and prior Product Description: MP3 upload, lightning fast ID3 tag...

[SECURITY] [DSA 901-1] New gnump3d packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 901-1 [email protected] http://www.debian.org/security/ Martin Schulze November 19th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 877-1] New gnump3d packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 877-1 [email protected] http://www.debian.org/security/ Martin Schulze October 28th, 2005 http://www.debian.org/security/faq -...

Multiple gnump3d MP3 streaming server (multiple vulnerabilities)

Crossite scriptin, directory travrsal...

DSA-877-1 gnump3d - cross-site-scripting, directory traversal

Bulletin has no description...

CVE-2005-2310

Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arbitrary code via an MP3 file with a long ID3v2 tag such as 1 ARTIST or 2 TITLE...

CVE-2005-2310

Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arbitrary code via an MP3 file with a long ID3v2 tag such as 1 ARTIST or 2 TITLE...

CVE-2005-2310: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arbitrary code via an MP3 file with a long ID3v2 tag such as 1 ARTIST or 2 TITLE...

Winamp < 5.093 Malformed ID3v2 Tag Handling Buffer Overflow

The remote host is using Winamp, a popular media player for Windows. The installed version of Winamp suffers from a buffer overflow vulnerability when processing overly-long ID3v2 tags in an MP3 file. An attacker may be able to exploit this flaw to execute arbitrary code on the remote host...

WinAmp MP3 files ID3v2 tags buffer overflow

Buffer overflow on oversized ID3v2 tag fields...

[Full-disclosure] LSS Security Advisory: Winamp remote buffer overflow vulnerability

LSS Security Advisory LSS-2005-07-14 http://security.lss.hr Title: Winamp remote buffer overflow vulnerability Advisory ID: LSS-2005-07-14 Date: 2005-07-14 Advisory URL: http://security.lss.hr/index.php?page=details&ID=LSS-2005-07-14 Impact: Remote and local code execution Risk Level: High...

CVE-2005-2054

Unknown vulnerability in RealPlayer 10 and 10.5 6.0.12.1040-1069 and RealOne Player v1 and v2 allows remote attackers to overwrite arbitrary files or execute arbitrary ActiveX controls via a crafted MP3 file...

CVE-2005-2054

Unknown vulnerability in RealPlayer 10 and 10.5 6.0.12.1040-1069 and RealOne Player v1 and v2 allows remote attackers to overwrite arbitrary files or execute arbitrary ActiveX controls via a crafted MP3 file...

High Risk Vulnerability in RealPlayer for Windows

John Heasman of NGSSoftware has discovered a high risk vulnerability in RealPlayer for Windows. Versions affected include: RealPlayer 10.5 6.0.12.1040-1069 RealPlayer 10 RealOne Player v2 RealOne Player v1 RealPlayer 10.5 6.0.12.1212 is NOT affected. The flaw permits the overwriting of a local fi...

CVE-2002-1847: Undefined Security Weakness

Buffer overflow in mplay32.exe of Microsoft Windows Media Player WMP 6.3 through 7.1 allows remote attackers to execute arbitrary commands via a long mp3 filename command line argument. NOTE: since the only known attack vector requires command line access, this may not be a vulnerability...