Nokia Multimedia Player 1.0 SEH Unicode

Exploit Title: Nokia Multimedia player SEH Unicode Date: January 11 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://www.brothersoft.com/nokia-multimedia-player-download-46238.html Version: 1.00.55.5010 Tested on: Windows xp sp3 running on VMware Fusion 3.1 and VirtualBox 3.2.8...

Nokia MultiMedia Player 1.0 - Local Overflow (SEH Unicode)

Exploit Title: Nokia Multimedia player SEH Unicode Date: January 11 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://www.brothersoft.com/nokia-multimedia-player-download-46238.html Version: 1.00.55.5010 Tested on: Windows xp sp3 running on VMware Fusion 3.1 and VirtualBox 3.2.8...

Joomla Component com_xmovie 1.0 Local File Inclusion Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla Component comxmovie 1.0 Local File Inclusion Vulnerability Author: KelvinX email protected Websites: http://xgroup.vn, http://kelvinx.net, http://facebook.com/kelvinxgr Date: December, 24-2010 Location: HCM City, Vietnam...

Joomla XMovie 1.0 Local File Inclusion

Exploit Title: Joomla Component comxmovie 1.0 Local File Inclusion Vulnerability Author: KelvinX [email protected] Websites: http://xgroup.vn, http://kelvinx.net, http://facebook.com/kelvinxgr Date: December, 24-2010 Location: HCM City, Vietnam ------------------------ Application: comxmovie...

Adobe Flash Player DefineFunction2 Memory Corruption (APSB10-26; CVE-2010-3646)

The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. The vulnerability is due to insufficient sanitization of the DefineFunction2 value by the Adobe Flash Player. A remote attacker might exploit this issue by convincing a victim to open a specially...

Moderate: Red Hat Security Advisory: libvpx security update

Updated libvpx packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Apple QuickTime for Windows文件系统权限本地信息泄露漏洞

BUGTRAQ ID: 45237 CVE ID: CVE-2010-0530 Apple QuickTime是一款非常流行的多媒体播放器。 Apple QuickTime在实现上存在漏洞，攻击者可利用此漏洞获取敏感信息，访问用户配置文件中"Apple Computer" 目录下的内容。 此漏洞源于文件系统权限问题。 Apple QuickTime Player 5.0.2 - 7.6.8 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.apple.com...

Winamp < 5.601 MIDI Timestamp Stack-based Buffer Overflow

The remote host is running Winamp, a media player for Windows. The version of Winamp installed on the remote host is earlier than 5.601. Such versions are potentially affected by a stack-based buffer overflow vulnerability due to an error in the 'inmidi.ddl' plugin that improperly serializes...

Security A Hidden Benefit of iOS 4.2 Update

Apple iPhone and iPad users are buzzing about the new features that come with the latest update to the company’s iOS mobile operating system. But the update also contains dozens of fixes for security holes that could have allowed attackers to compromise the popular devices using malicious PDF...

Joomla Component com_jimtawl Local File Inclusion Vulnerability

Exploit for php platform in category web applications =============================================================== Joomla Component comjimtawl Local File Inclusion Vulnerability =============================================================== Author : Maskmagicianz Date : November, 20/2010...

Adobe Shockwave Player Duplicate Keys Memory Corruption (APSB10-25; CVE-2010-4088)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A memory corruption vulnerability has been identified in Adobe Shockwave Player. The vulnerability is due t...

Adobe Shockwave Director rcsL Chunk Remote Code Execution (APSA10-04; CVE-2010-3653)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A memory corruption vulnerability has been identified in Adobe Shockwave Player. An attacker can exploit th...

VLC媒体播放器Mozilla VLC Multimedia插件内存破坏漏洞

BUGTRAQ ID: 44211 VLC Media Player是一款免费的媒体播放器。 VLC Media Player中使用Mozilla VLC Multimedia插件播放嵌入式的音视频文件。如果用户使用安装了该插件的浏览器访问了恶意网站并向不存在的文件传送了src参数，就可能触发内存破坏，导致执行任意代码。 VideoLAN VLC Media Player 1.1.4 厂商补丁： VideoLAN -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.videolan.org/ html...

VideoLAN VLC Media Player 1.1.4 Mozilla MultiMedia Plugin - Remote Code Execution

source: https://www.securityfocus.com/bid/44211/info VLC media player is prone to a remote code-execution vulnerability. Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions. VLC media player 1.1.4 is...

Adobe Acrobat Reader Multimedia Playing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Adobe Shockwave Director tSAC Chunk Parsing Memory Corruption (CVE-2010-2866)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A remote code execution vulnerability has been identified in Adobe Shockwave Player. The vulnerability is d...

Adobe Shockwave Player Director File FFFFFF88 Record Integer Overflow (CVE-2010-2876; CVE-2010-4192)

Adobe Shockwave is a multimedia player that allows users to view interactive web content such as games, business presentations, entertainment, and advertisements from the web browser. It allows Adobe Director applications to be published on the Internet and viewed in a web browser on systems whic...

Bluejay DLL Hijacking Exploit

Exploit for windows platform in category local exploits ============================= Bluejay DLL Hijacking Exploit ============================= / Bluejay DLL Hijacking Exploit wnaspi32.dll Author : anT!-Tr0J4n Greetz : Dev-PoinT.com inj3ct0r.com All Dev-poinT members and my friends Email :...

Multi Media Player Dll Hijacking Exploit

Exploit for windows platform in category local exploits ======================================== Multi Media Player Dll Hijacking Exploit ======================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ ...

Microsoft Windows Media Player MPEG-4 Codec Code Execution (MS10-062; CVE-2010-0818)

MPEG-4 is an International Standards Organization ISO specification that covers many aspects of multimedia presentation including compression, authoring and delivery. A remote code execution vulnerability has been reported in the way the MPEG-4 codec handles supported format files. The...