Elecard MPEG Player 5.5 Buffer Overflow

!/usr/bin/perl -w Program : Elecard MPEG Player Version : 5.5 build 15884.081218 website : http://www.elecard.com/download/index.php Download : http://www.elecard.com/ftp/pub/mpeg/player/EMpgPlayer.zip Type : .M3U Buffer Overflow POC EAX 00000000 ECX 41414141 EDX 7C9037D8 ntdll.7C9037D8 EBX...

Elecard MPEG Player 5.5 (.m3u File) Stack Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ============================================================= Elecard MPEG Player 5.5 .m3u File Stack Buffer Overflow PoC ============================================================= !/usr/bin/perl -w Program : Elecard MPEG Player Version : 5.5...

Elecard MPEG Player 5.5 - .m3u Stack Buffer Overflow (PoC)

Elecard MPEG Player 5.5 - .m3u Stack Buffer Overflow PoC !/usr/bin/perl -w Program : Elecard MPEG Player Version : 5.5 build 15884.081218 website : http://www.elecard.com/download/index.php Download : http://www.elecard.com/ftp/pub/mpeg/player/EMpgPlayer.zip Type : .M3U Buffer Overflow POC EAX...

Elecard MPEG Player 5.5 - '.m3u' Stack Buffer Overflow (PoC)

!/usr/bin/perl -w Program : Elecard MPEG Player Version : 5.5 build 15884.081218 website : http://www.elecard.com/download/index.php Download : http://www.elecard.com/ftp/pub/mpeg/player/EMpgPlayer.zip Type : .M3U Buffer Overflow POC EAX 00000000 ECX 41414141 EDX 7C9037D8 ntdll.7C9037D8 EBX...

FAAD2 library buffer overflow

Buffer overflow on MPEG-4 files parsing...

FAAD2: User-assisted execution of arbitrary code

Background FAAD2 is an open source MPEG-4 and MPEG-2 AAC decoder. Description The ICST-ERCIS Peking University reported a heap-based buffer overflow in the decodeMP4file function in frontend/main.c. Impact A remote attacker could entice a user to open a specially crafted MPEG-4 MP4 file in an...

Design/Logic Flaw

MPlayer, possibly 1.0rc1, allows remote attackers to cause a denial of service SIGSEGV and application crash via 1 a malformed MP3 file, as demonstrated by lol-mplayer.mp3; 2 a malformed Ogg Vorbis file, as demonstrated by lol-mplayer.ogg; 3 a malformed MPEG-1 file, as demonstrated by...

CVE-2007-6718

MPlayer, possibly 1.0rc1, allows remote attackers to cause a denial of service SIGSEGV and application crash via 1 a malformed MP3 file, as demonstrated by lol-mplayer.mp3; 2 a malformed Ogg Vorbis file, as demonstrated by lol-mplayer.ogg; 3 a malformed MPEG-1 file, as demonstrated by...

CVE-2008-4201

Heap-based buffer overflow in the decodeMP4file function frontend/main.c in FAAD2 2.6.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MPEG-4 MP4 file...

CVE-2008-4201

Heap-based buffer overflow in the decodeMP4file function frontend/main.c in FAAD2 2.6.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MPEG-4 MP4 file...

Heap overflow

Heap-based buffer overflow in the decodeMP4file function frontend/main.c in FAAD2 2.6.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MPEG-4 MP4 file...

CVE-2008-4201

Heap-based buffer overflow in the decodeMP4file function frontend/main.c in FAAD2 2.6.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MPEG-4 MP4 file...

CVE-2008-4201

Heap-based buffer overflow in the decodeMP4file function frontend/main.c in FAAD2 2.6.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MPEG-4 MP4 file...

Gentoo Security Advisory GLSA 200510-02 (MPEG Tools)

The remote host is missing updates announced in advisory GLSA 200510-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200510-02 (MPEG Tools)

The remote host is missing updates announced in advisory GLSA 200510-02. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

faad2 -- heap overflow vulnerability

CVE reports: Heap-based buffer overflow in the decodeMP4file function frontend/main.c in FAAD2 2.6.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MPEG-4 MP4 file...

FreeBSD Ports: libxine

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

libid3tag拒绝服务漏洞

BUGTRAQ ID: 29210 CVECAN ID: CVE-2008-2109 libid3tag是MPEG音频解码器MAD中所捆绑的ID3标签操控库。 libid3tag库在解析ID3FIELDTYPESTRINGLIST字段时如果所要解析的数据以\0结尾的话，ptr == 0，但end - ptr条件为1，所以循环会无限继续。 以下是有漏洞的代码段： field.c 2003-04-19 09:14:33.000000000 +0900 --- field-patched.c 2008-01-13 16:08:22.000000000 +0900 291,297 end = p...

DEBIAN-CVE-2008-1768

Multiple integer overflows in VLC before 0.8.6f allow remote attackers to cause a denial of service crash via the 1 MP4 demuxer, 2 Real demuxer, and 3 Cinepak codec, which triggers a buffer overflow...

Debian Security Advisory DSA 657-1 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory DSA 657-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...