Apple Mac OS X CoreAudio MP4文件解析缓冲区溢出漏洞

BUGTRAQ ID: 37868 CVECAN ID: CVE-2010-0036 Mac OS X是苹果家族机器所使用的操作系统。 Mac OS X的CoreAudio驱动在解析mp4音频文件时存在缓冲区溢出，用户受骗打开恶意的mp4文件就可以导致拒绝服务或执行任意指令。 Apple Mac OS X 10.6.2 Apple Mac OS X 10.5.8 Apple MacOS X Server 10.6.2 Apple MacOS X Server 10.5.8 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2010-0036

Buffer overflow in CoreAudio in Apple Mac OS X 10.5.8 and 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MP4 audio file...

Buffer overflow

Buffer overflow in CoreAudio in Apple Mac OS X 10.5.8 and 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MP4 audio file...

CVE-2010-0036

Buffer overflow in CoreAudio in Apple Mac OS X 10.5.8 and 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MP4 audio file...

CVE-2010-0036

CVE-2010-0036 affects Mac OS X CoreAudio in 10.5.8 and 10.6.2; a buffer overflow in parsing MP4 audio files may allow remote code execution or cause a denial of service (application crash). Evidence from multiple sources confirms the impact and Apple’s patch is Security Update 2010-001 (SecUpd201...

CVE-2010-0036

Buffer overflow in CoreAudio in Apple Mac OS X 10.5.8 and 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MP4 audio file...

MP4 Player 4.0 Crash Exploit

!usr/bin/perl Exploits title :MP4 Player 4.0 Local Crash Poc Date : 2010/01/02 Aouther : SarBoT511 downloads :http://mp4-player.ivefound.com/download/mp4PlayerSetup.exe tested on :win xp sp2 MP4 Player 4.0 Greatz 2 : aB0 M0haM3d and lezr crew $file="SarBoT511.m4v"; $boom="A" x 2000;...

MP4 Player 4.0 Local Crash Poc

Exploit for unknown platform in category dos / poc ============================== MP4 Player 4.0 Local Crash Poc ============================== Title: MP4 Player 4.0 Local Crash Poc CVE-ID: OSVDB-ID: Author: SarBoT511 Published: 2010-01-02 Verified: no view source print? !usr/bin/perl Exploits...

MP4 Player 4.0 - Local Crash (PoC)

MP4 Player 4.0 - Local Crash PoC !usr/bin/perl Exploits title :MP4 Player 4.0 Local Crash Poc Date : 2010/01/02 Aouther : SarBoT511 downloads :http://mp4-player.ivefound.com tested on :win xp sp2 MP4 Player 4.0 Greatz 2 : aB0 M0haM3d and lezr crew $file="SarBoT511.m4v"; $boom="A" x 2000;...

MP4 Player 4.0 - Local Crash (PoC)

!usr/bin/perl Exploits title :MP4 Player 4.0 Local Crash Poc Date : 2010/01/02 Aouther : SarBoT511 downloads :http://mp4-player.ivefound.com tested on :win xp sp2 MP4 Player 4.0 Greatz 2 : aB0 M0haM3d and lezr crew $file="SarBoT511.m4v"; $boom="A" x 2000; openmyfile,"$file"; print myfile $boom;...

VideoLAN VLC Media Player MP4_BoxDumpStructure Buffer Overflow

Added: 12/07/2009 BID: 36439 OSVDB: 58217 Background VLC media player is a media player supporting various audio and video formats for multiple platforms. Problem A buffer overflow vulnerability exists in VideoLAN VLC media player due to an error when an overly deep box structure in ".mp4" files....

VideoLAN VLC Media Player MP4_BoxDumpStructure Buffer Overflow

Added: 12/07/2009 BID: 36439 OSVDB: 58217 Background VLC media player is a media player supporting various audio and video formats for multiple platforms. Problem A buffer overflow vulnerability exists in VideoLAN VLC media player due to an error when an overly deep box structure in ".mp4" files....

VideoLAN VLC Media Player MP4_BoxDumpStructure Buffer Overflow

Added: 12/07/2009 BID: 36439 OSVDB: 58217 Background VLC media player is a media player supporting various audio and video formats for multiple platforms. Problem A buffer overflow vulnerability exists in VideoLAN VLC media player due to an error when an overly deep box structure in ".mp4" files....

VideoLAN VLC Media Player MP4_BoxDumpStructure Buffer Overflow

Added: 12/07/2009 BID: 36439 OSVDB: 58217 Background VLC media player is a media player supporting various audio and video formats for multiple platforms. Problem A buffer overflow vulnerability exists in VideoLAN VLC media player due to an error when an overly deep box structure in ".mp4" files....

3ivx MPEG-4 MP4 File Handling Stack Overflow (CVE-2007-6401)

MPEG-4 Part 14, formally ISO/IEC 14496-14:2003, is a multimedia container format standard specified as a part of MPEG-4. It is most commonly used to store digital audio and digital video streams, especially those defined by MPEG, but can also be used to store other data such as subtitles and stil...

Gentoo Security Advisory GLSA 200811-03 (faad2)

The remote host is missing updates announced in advisory GLSA 200811-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GLSA-200811-03 : FAAD2: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200811-03 FAAD2: User-assisted execution of arbitrary code The ICST-ERCIS Peking University reported a heap-based buffer overflow in the decodeMP4file function in frontend/main.c. Impact : A remote attacker could entice a user to...

[ GLSA 200811-03 ] FAAD2: User-assisted execution of arbitrary code

Gentoo Linux Security Advisory GLSA 200811-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

多个产品库MP4文件远程拒绝服务漏洞

BUGTRAQ ID: 31957 CNCAN ID：CNCAN-2008102904 多个电话和音频产品使用的库在处理畸形MP4文件时存在问题，可导致应用程序崩溃。 这些产品包括： Apple iPhone Apple iPod touch VideoLan VLC 目前没有详细漏洞细节提供。其他产品也可能受此漏洞影响。 VideoLAN VLC media player 0.9.4 VideoLAN VLC media player 0.9.3 VideoLAN VLC media player 0.9.2 VideoLAN VLC media player 0.9.1 VideoL...

CVE-2008-4201

Heap-based buffer overflow in the decodeMP4file function frontend/main.c in FAAD2 2.6.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MPEG-4 MP4 file...