RealNetworks RealPlayer FLV Parsing Multiple Integer Overflows (CVE-2010-3000)

RealPlayer is a media player application developed by RealNetworks Inc. This application is capable of playing back numerous multimedia file formats and can open media files from local file system or network servers. RealPlayer has an extensible nature that allows it to handle different media fil...

Vulnerabilities in H.323 Message Processing - Cisco Systems

Multiple Cisco products contain vulnerabilities in the processing of H.323 messages, which are typically used in Voice over Internet Protocol VoIP or multimedia applications. A test suite has been developed by the University of Oulu to target this protocol and identify vulnerabilities. Support fo...

Adobe Shockwave Player rcsL Chunk Pointer Offset Heap Overflow (APSB10-20; CVE-2010-2867)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A remote code execution vulnerability has been identified in Adobe Shockwave Player. The vulnerability is d...

Adobe Shockwave Player MMAP Index Memory Corruption (APSB10-20; CVE-2010-2880)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A memory corruption vulnerability has been identified in Adobe Shockwave Player. The vulnerability is due t...

Owning Virtual Worlds For Fun and Profit

I’m a security researcher. I find bugs in software, they get fixed. I write exploits, they give me a shell. It’s more or less always the same and it gets kind of boring. But there was one exploit I helped write back in 2007 that was a little different. This is the story of that exploit. Second Li...

Apple QuickTime Crafted HTTP Error Response Buffer Overflow (CVE-2008-0234)

Apple QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous audio/video stream formats, which include RSTP. There exists a buffer overflow vulnerability in Apple QuickTime application. The flaw ...

Apple QuickTime FLIC Animation File Buffer Overflow (CVE-2006-4384)

Apple QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous audio and video formats. One of the supported video formats is the Autodesk Animator and/or Autodesk Animator Pro format, known as FLI...

MDVA-2010:157 : gtk+2.0

The Gnome Settings Daemon would crash when the multimedia volume keys were used when the mouse pointer is on the secondary screen. This updates gtk+ to a new version that also has fixes for crashes in empathy, eog and other applications. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been...

Apple QuickTime QuickTimeStreaming.qtx远程栈溢出漏洞

BUGTRAQ ID: 41962 Apple QuickTime是一款非常流行的多媒体播放器。 QuickTimeStreaming.qtx在创建将要写入到调试日志文件的字符串时存在栈溢出漏洞，如果用户所查看的网页引用了包含有超长URL的 SMIL文件就可以触发这个溢出，导致执行任意代码。 Apple QuickTime Player 7.6.6 1671 厂商补丁： Apple ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.apple.com...

Joomla! Component YouTube 1.5 - SQL Injection

Joomla! Component YouTube 1.5 - SQL Injection Exploit Title: Joomla "comyoutube" Sql Injection Vulnerability Date: 2010-07-24 Author: Forza-Dz Software Link: http://extensions.joomla.org/extensions/multimedia/ multimedia-channels/video-channels/12037 Version: 1.5 Tested on: windows-xp-sp2-fr :...

GStreamer QuickTime File Parsing Multiple Heap Overflows (CVE-2009-0398)

GStreamer is a pipeline based multimedia framework written in the C programming language. GStreamer allows a programmer to create a variety of media-handling components, including simple audio playback, audio and video playback, recording, streaming, and editing. The pipeline design serves as a...

Winamp < 5.58 Buffer Overflow

The remote host is running Winamp, a media player for Windows. The version of Winamp installed on the remote host is earlier than 5.58. Such versions are reportedly affected by a stack-based buffer overflow vulnerability when parsing VP6 video content. An attacker, exploiting this flaw, can execu...

TCW PHP Album SQL injection Vulnerabilty

Exploit for php platform in category web applications ======================================== TCW PHP Album SQL injection Vulnerabilty ======================================== Name : TCW PHP Album SQL iNjection Vulnerabilty Critical Level :VERY HIGH vendor URL...

TCW PHP Album - Multiple Vulnerabilities

TCW PHP Album - Multiple Vulnerabilities 1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: TCW PHP Album Multiple Vulnerability Vendor...

TCW PHP Album - Multiple Vulnerabilities

1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: TCW PHP Album Multiple Vulnerability Vendor url:http://tcwphpalbum.sourceforge.net/ Version:1...

Allomani - Super Multimedia v2.5 - CSRF Add Admin Account

Exploit for php platform in category web applications ========================================================= Allomani - Super Multimedia v2.5 - CSRF Add Admin Account ========================================================= Exploit Title: Allomani - Super Multimedia v2.5 - CSRF Add Admin...

Allomani Super Multimedia 2.5 Cross Site Request Forgery

Exploit Title: Allomani - Super Multimedia v2.5 - CSRF Add Admin Account Date: 29-06-2010 Author: G0D-F4Th3r Software Link: http://demos.allomani.com/media250/ Version: 2.5 Tested on: http://demos.allomani.com/media250/ Greetz to : AL-MoGrM - dEvIL NeT - Bad hacker - v4-team members - And All My...

Allomani Super MultiMedia 2.5 - Cross-Site Request Forgery (Add Admin)

Allomani Super MultiMedia 2.5 - Cross-Site Request Forgery Add Admin Exploit Title: Allomani - Super Multimedia v2.5 - CSRF Add Admin Account Date: 29-06-2010 Author: G0D-F4Th3r Software Link: http://allomani.com Version: 2.5 Greetz to : AL-MoGrM - dEvIL NeT - Bad hacker - v4-team members - And A...

Allomani Super MultiMedia 2.5 - Cross-Site Request Forgery (Add Admin)

Exploit Title: Allomani - Super Multimedia v2.5 - CSRF Add Admin Account Date: 29-06-2010 Author: G0D-F4Th3r Software Link: http://allomani.com Version: 2.5 Greetz to : AL-MoGrM - dEvIL NeT - Bad hacker - v4-team members - And All My Friends...

CVE-2010-1515

Multiple cross-site scripting XSS vulnerabilities in index.php in TomatoCMS 2.0.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 keyword or 2 article-id parameter in conjunction with a /admin/news/article/list PATHINFO; the 3 keyword parameter in conjunction...