CVE-2009-2203

The CVE-2009-2203 entry describes a buffer overflow in Apple QuickTime prior to 7.6.4 triggered by parsing MPEG-4 video files, which could allow remote code execution or cause a application crash/DoS. Apple released QuickTime 7.6.4 to address this issue (bounds checking improvements).

QuickTime < 7.6.4 Multiple Vulnerabilities (Mac OS X)

The version of QuickTime installed on the remote Mac OS X host is older than 7.6.4. Such versions contain several vulnerabilities : - A memory corruption issue in QuickTime's handling of H.264 movie files may lead to an application crash or arbitrary code execution. CVE-2009-2202 - A buffer...

Microsoft Windows MP3 File Media Playback Memory Corruption (MS09-047; CVE-2009-2499)

MPEG-1 Audio Layer 3 MP3 is a file format which uses lossy compression to compress audio information. A remote code execution vulnerability has been reported in the way Microsoft Windows handles specially crafted MP3 media files. The vulnerability is due the Windows component responsible for...

CVE-2009-2917

Stack-based buffer overflow in ImTOO MPEG Encoder 3.1.53 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted string in a 1 .cue or 2 .m3u playlist file...

Stack overflow

Stack-based buffer overflow in ImTOO MPEG Encoder 3.1.53 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted string in a 1 .cue or 2 .m3u playlist file...

CVE-2009-2917

ImTOO MPEG Encoder 3.1.53 is affected by a stack-based buffer overflow that can be triggered by a crafted string in playlist files (.cue or .m3u), permitting remote denial of service and potentially arbitrary code execution. This CVE (CVE-2009-2917) is documented in multiple sources (NVD entry, C...

CVE-2009-2917

Stack-based buffer overflow in ImTOO MPEG Encoder 3.1.53 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted string in a 1 .cue or 2 .m3u playlist file...

ImTOO MPEG Encoder 3.1.53 (.cue/.m3u) Local Buffer Overflow PoC

Exploit for unknown platform in category dos / poc =============================================================== ImTOO MPEG Encoder 3.1.53 .cue/.m3u Local Buffer Overflow PoC =============================================================== !/usr/bin/python print "ImTOO MPEG Encoder 3.1.53...

ImTOO MPEG Encoder 3.1.53 - .cue .m3u Local Buffer Overflow (PoC)

ImTOO MPEG Encoder 3.1.53 - .cue .m3u Local Buffer Overflow PoC !/usr/bin/python print "ImTOO MPEG Encoder 3.1.53 .cue/.m3u local stack overlow POC" print " finded by : opt!x hacker " print "download: http://www.soft32.com/download/63-300154-1/mpeg-encoder.exe " junk = "\x41"4...

ImTOO MPEG Encoder 3.1.53 - '.cue' / '.m3u' Local Buffer Overflow (PoC)

!/usr/bin/python print "ImTOO MPEG Encoder 3.1.53 .cue/.m3u local stack overlow POC" print " finded by : opt!x hacker " print "download: http://www.soft32.com/download/63-300154-1/mpeg-encoder.exe " junk = "\x41"4 file=open"crash.m3u","w" file=open"crash.cue","w" file.writejunk file.close...

ImTOO MPEG Encoder 3.1.53 Overflow

!/usr/bin/python print "ImTOO MPEG Encoder 3.1.53 .cue/.m3u local stack overlow POC" print " finded by : opt!x hacker " print "download: http://www.soft32.com/download/63-300154-1/mpeg-encoder.exe " junk = "\x41"4 file=open"crash.m3u","w" file=open"crash.cue","w" file.writejunk file.close...

ImTOO MPEG Encoder 3.1.53 (.cue/.m3u) Local Buffer Overflow PoC

No description provided by source. !/usr/bin/python print "ImTOO MPEG Encoder 3.1.53 .cue/.m3u local stack overlow POC" print " finded by : opt!x hacker [email protected] " print "download: http://www.soft32.com/download/63-300154-1/mpeg-encoder.exe " junk = "\x41"4 file=open"crash.m3u","w"...

Microsoft DirectShow (msvidctl.dll) MPEG-2 Memory Corruption

This module exploits a memory corruption within the MSVidCtl component of Microsoft DirectShow BDATuner.MPEG2TuneRequest. By loading a specially crafted GIF file, an attacker can overrun a buffer and execute arbitrary code. ClassID is now configurable via an advanced option otherwise randomized -...

DirectShow msvidctl.dll组件解析畸形MPEG2视频格式文件溢出漏洞

“MPEG-2标准”制定于1994年，设计目标是高级工业标准的图象质量以及更高的传输率。MPEG-2所能提供每秒钟3兆到10兆的传输率,其在NTSC制式下的分辨率可达720X486。由于出色的性能表现，MPEG-2被用作DVD的指定标准外，并适用于HDTV高清电视。此外，MPEG-2还广泛用于为广播、有线电视网、电缆网络以及卫星直播提供广播级的数字视频。 是DirectShow相关msvidctl.dll组件解析畸形MPEG2视频格式文件触发溢出，攻击者可以使用普通的javascript堆喷射方式远程执行任意代码。 Windows...

CVE-2009-0959

The MPEG-4 video codec in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to cause a denial of service device reset via a crafted MPEG-4 video file that triggers an "input validation issue."...

Input validation

The MPEG-4 video codec in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to cause a denial of service device reset via a crafted MPEG-4 video file that triggers an "input validation issue."...

CVE-2009-0959

CVE-2009-0959 affects Apple iPhone OS 1.0–2.2.1 and iPhone OS for iPod touch 1.1–2.2.1. The vulnerability is in the MPEG-4 video codec and is caused by an input validation issue in a crafted MPEG-4 video file, leading to a denial of service (device reset). Exploitation details are not provided in...

CVE-2009-0959

The MPEG-4 video codec in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to cause a denial of service device reset via a crafted MPEG-4 video file that triggers an "input validation issue."...

PT-2009-3541 · Apple +1 · Ios +1

Name of the Vulnerable Software and Affected Versions: Apple iPhone OS versions 1.0 through 2.2.1 Apple iPhone OS for iPod touch versions 1.1 through 2.2.1 Description: The issue is related to the MPEG-4 video codec, which allows remote attackers to cause a denial of service, resulting in a devic...

Fedora 10 : xine-lib-1.1.16-1.fc10 (2009-0483)

This updates xine-lib to the upstream 1.1.16 release. This fixes several bugs, including the security issues CVE-2008-5234 vector 1, CVE-2008-5236, CVE-2008-5237, CVE-2008-5239, CVE-2008-5240 vectors 3 & 4 and CVE-2008-5243. See http://sourceforge.net/project/shownotes.php?releaseid=652075&groupi...