Tomabo MP4 Player 3.11.6 - Local Stack Overflow (SEH)

Tomabo MP4 Player 3.11.6 - Local Stack Overflow SEH !/usr/bin/python Exploit Title: Tomabo MP4 Player 3.11.6 SEH Based Stack Overflow Exploit Author: @yokoacc, @nudragn, @runggareksya Vendor Homepage: http://www.tomabo.com/ Software Link: http://www.tomabo.com/mp4-player/download.html Vulnerable...

Tomabo MP4 Player 3.11.6 - Local Stack Overflow (SEH)

!/usr/bin/python Exploit Title: Tomabo MP4 Player 3.11.6 SEH Based Stack Overflow Exploit Author: @yokoacc, @nudragn, @runggareksya Vendor Homepage: http://www.tomabo.com/ Software Link: http://www.tomabo.com/mp4-player/download.html Vulnerable App: Attached Version: 3.11.6 possibility = 3.11.6...

Tomabo MP4 Converter 3.10.12 Denial Of Service

!/usr/bin/python Exploit Title: Tomabo MP4 Converter 3.10.12 - .m3u Denial of service Crush application Date: 8-10-2015 Exploit Author: M.Ibrahim [email protected] E-Mail: vulnbug gmail.com Vendor Homepage: http://www.tomabo.com/mp4-converter/index.html Version: 3.10.12 Tested on: windows 7 x86...

Tomabo MP4 Converter 3.10.12 - 3.11.12 (.m3u) Denial of service (Crush application)

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title: Tomabo MP4 Converter 3.10.12 - .m3u Denial of service Crush application Date: 8-10-2015 Exploit Author: M.Ibrahim email protected E-Mail: vulnbug gmail.com Vendor Homepage:...

Tomabo MP4 Converter 3.10.12 3.11.12 - .m3u File Crush Application (Denial of Service)

Tomabo MP4 Converter 3.10.12 3.11.12 - .m3u File Crush Application Denial of Service !/usr/bin/python Exploit Title: Tomabo MP4 Converter 3.10.12 - .m3u Denial of service Crush application Date: 8-10-2015 Exploit Author: M.Ibrahim [email protected] E-Mail: vulnbug gmail.com Vendor Homepage:...

Tomabo MP4 Converter 3.10.12 < 3.11.12 - '.m3u' File Crush Application (Denial of Service)

!/usr/bin/python Exploit Title: Tomabo MP4 Converter 3.10.12 - .m3u Denial of service Crush application Date: 8-10-2015 Exploit Author: M.Ibrahim [email protected] E-Mail: vulnbug gmail.com Vendor Homepage: http://www.tomabo.com/mp4-converter/index.html Version: 3.10.12 Tested on: windows 7 x86...

Adobe Flash Player Memory Corruption (APSB15-23: CVE-2015-5578; CVE-2015-5579)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted mp4 file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted mp4 file...

Adobe Flash Player Memory Corruption (APSB15-23: CVE-2015-5580)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted MP4 file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted MP4 file...

Android Denial of Service Vulnerability

Android is an operating system based on the Linux open kernel, announced on November 5, 2007 by Google Inc. for cell phones. A denial of service vulnerability exists in Android versions prior to 5.1.1, LMY48I. Allows remote attackers to execute arbitrary code or cause a denial of service via...

CVE-2015-6602

libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file, as demonstrated by an attack against use of libutils by libstagefright in Android 5.x...

CVE-2015-6602

libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file, as demonstrated by an attack against use of libutils by libstagefright in Android 5.x...

CVE-2015-3876

libstagefright in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file...

CVE-2015-6602

libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file, as demonstrated by an attack against use of libutils by libstagefright in Android 5.x...

CVE-2015-3876

libstagefright in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file...

Design/Logic Flaw

libstagefright in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file...

Input validation

libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file, as demonstrated by an attack against use of libutils by libstagefright in Android 5.x...

CVE-2015-3876

libstagefright in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file...

CVE-2015-6602

libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file, as demonstrated by an attack against use of libutils by libstagefright in Android 5.x...

CVE-2015-3876

libstagefright in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file...

CVE-2015-6602

libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file, as demonstrated by an attack against use of libutils by libstagefright in Android 5.x...