Apple QuickTime Movie File Clipping Region Handling Heap Buffer Overflow (CVE-2009-0954)

Apple's QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous audio/video formats. A QuickTime movie file consists of Metadata and Atoms. The Metadata stores the description of the media content...

[InterN0T] ShareTronix 1.0.4 - HTML Injection Vulnerability

ShareTronix - HTML Injection Vulnerability Version Affected: 1.0.4 newest Info: Sharetronix Opensource is a multimedia microblogging platform. It helps people in a community, company, or group to exchange short messages over the Web. Credits: MaXe from InterN0T patched the vulnerability & Reelix...

Apple iTunes AAC File Handling Integer Overflow (CVE-2006-1467)

Apple iTunes is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous video and audio formats. One of the formats that the player is capable of processing is the protected advanced audio coding AAC media fil...

Security Best Practice: SIP Protocol Enforcement

The Session Initiation Protocol SIP is a signaling protocol, widely used for controlling multimedia communication sessions such as voice and video calls over Internet Protocol IP. The protocol can be used for creating, modifying and terminating two-party unicast or multiparty multicast sessions...

acroread: media.newplayer JavaScript API code execution vulnerability (APSB10-02)

Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild...

Total MultiMedia Features - Sony Ericsson Phones Denial of Service (PoC)

Total MultiMedia Features - Sony Ericsson Phones Denial of Service PoC Total Multimedia Features DoS PoC for Sony Ericsson Phones. Should work on almost all of their Models By Aodrulez. In Sony Ericsson phonestested on w800i,k750i,w810i, if you simply rename a File with a ".sest" extension, it...

Total Multimedia Features DoS PoC for Sony Ericsson Phones

Exploit for unknown platform in category dos / poc ========================================================== Total Multimedia Features DoS PoC for Sony Ericsson Phones ========================================================== Total Multimedia Features DoS PoC for Sony Ericsson Phones. Should wo...

Total MultiMedia Features - Sony Ericsson Phones Denial of Service (PoC)

Total Multimedia Features DoS PoC for Sony Ericsson Phones. Should work on almost all of their Models By Aodrulez. In Sony Ericsson phonestested on w800i,k750i,w810i, if you simply rename a File with a ".sest" extension, it achieves "System" File status.This file can't be deleted, nor renamed or...

'Blitzableiter' Protects Against Flash Player Exploits

A German security researcher has released an open-source tool that analyses and cleans up Flash code before playback to prevent security holes in Adobe Flash Player from being exploited. The tool, called “Blitzableiter” lightning rod, is the brainchild of Felix “FX” Lindner, a well-known hacker w...

RealNetworks RealPlayer RealMedia Security Bypass (CVE-2005-2055)

RealPlayer is a media player produced by RealNetworks, Inc. that supports a variety of open and proprietary multimedia stream and file formats. Versions of RealPlayer are available for most common platforms such as Windows, Linux, Solaris, etc. A vulnerability exists in the way that RealNetworks...

RealNetworks Helix Server DESCRIBE Request Buffer Overflow (CVE-2006-6026)

Helix Server is a multi-media server that is designed to serve streaming and static audio and video content. Helix project, Helix Server being part of it, is intended as a largely free software/open source digital media framework that runs on numerous operating systems and processors including...

dB Masters Multimedia Insecure Cookie Handling Vulnerability

No description provided by source. ======================================================================================== | Title : dB Masters Multimedia Insecure Cookie Handling Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El...

dB Masters Multimedia Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ============================================================ dB Masters Multimedia Insecure Cookie Handling Vulnerability ============================================================...

dB Masters MultiMedia - Insecure Cookie Handling

======================================================================================== | Title : dB Masters Multimedia Insecure Cookie Handling Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | W...

Adobe Reader/Acrobat Multimedia Doc.media.newPlayer Code Execution Vulnerability - Windows

Adobe Reader/Acrobat is prone to Doc.media.newPlayer Remote Code Execution vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MPlayer demux_open_vqf TwinVQ File Handling Buffer Overflow (CVE-2008-5616)

MPlayer is an open source multimedia player for Linux that is also available in a Mac OS X and Windows versions. It can play many audio and video formats MPEG, DivX, ogg, TwinVQ, etc. as well as various streaming protocols. It is highly portable and available for multiple platforms. There exists ...

Cisco WebEx Multiple WRF Player Vulnerabilities

No description provided by source. Cisco Security Advisory: Multiple Cisco WebEx WRF Player Vulnerabilities Advisory ID: cisco-sa-20091216-webex http://www.cisco.com/warp/public/707/cisco-sa-20091216-webex.shtml Revision 1.0 For Public Release 2009 December 16 1600 UTC GMT Summary ======= Multipl...

Apple QuickTime SMIL File Handling Integer Overflow (CVE-2007-2394)

QuickTime is a media player application developed by Apple. It is capable of playing back numerous multimedia file formats from local file system or network servers. One of the media formats supported by Apple QuickTime is SMIL. An integer overflow vulnerability exists in Apple QuickTime. The...

Nullsoft WinAmp Ultravox ultravox-max-msg Header Buffer Overflow (CVE-2006-5567)

NullSoft Winamp is a multimedia player that is capable of playing many formats of audio and video files and streaming protocols. Winamp supports the Ultravox media streaming format, a proprietary streaming media protocol developed by AOL. Ultravox or Ultravox Media On Demand Server UltraMODS is...

PT-2009-1122

Name of the Vulnerable Software and Affected Versions Adobe Reader versions 8.x through 8.2 Adobe Reader versions 9.x through 9.3 Adobe Acrobat versions 8.x through 8.2 Adobe Acrobat versions 9.x through 9.3 Description The issue is related to a use-after-free vulnerability in the...