Winamp v5.572 Local BoF Exploit (Win7 ASLR and DEP Bypass)

No description provided by source. !/usr/bin/python Exploit Title: Winamp v5.572 Local BoF Exploit Win7 ASLR and DEP Bypass Date: June 26, 2010 Author: Node Software Link: http://download.nullsoft.com/winamp/client/winamp5572fullemusic-7plusen-us.exe Tested on: Windows 7 Ultimate x64 ENG Badchars...

Winamp 5.572 (Windows 7) - Local Buffer Overflow (ASLR + DEP Bypass)

!/usr/bin/python Exploit Title: Winamp v5.572 Local BoF Exploit Win7 ASLR and DEP Bypass Date: June 26, 2010 Author: Node Software Link: http://download.nullsoft.com/winamp/client/winamp5572fullemusic-7plusen-us.exe Tested on: Windows 7 Ultimate x64 ENG Badchars: '\x00\xff\x5c\x2f\x0a\x0d\x20'...

Winamp 5.572 (Windows 7) - Local Buffer Overflow (ASLR + DEP Bypass)

Winamp 5.572 Windows 7 - Local Buffer Overflow ASLR + DEP Bypass !/usr/bin/python Exploit Title: Winamp v5.572 Local BoF Exploit Win7 ASLR and DEP Bypass Date: June 26, 2010 Author: Node Software Link: http://download.nullsoft.com/winamp/client/winamp5572fullemusic-7plusen-us.exe Tested on: Windo...

Winamp v5.572 Local BoF Exploit (Win7 ASLR and DEP Bypass)

Exploit for windows platform in category local exploits ========================================================== Winamp v5.572 Local BoF Exploit Win7 ASLR and DEP Bypass ========================================================== !/usr/bin/python Exploit Title: Winamp v5.572 Local BoF Exploit Wi...

Winamp v5.571 malicious AVI file handling DoS Vulnerability

No description provided by source. Tested on Windows 7 and Winamp v5.571x86 This bug is informed to Nullsoft and was fixed long back. The status can be found at http://forums.winamp.com/showthread.php?s=&threadid=316000 This code works on Python 3.0. To make it work on 3.0 remove braces in print...

SHOUTcast DNAS/Win32 1.9.4 - File Request Format String Overflow (Metasploit)

$Id: shoutcastformat.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

Nullsoft Winamp MP4 Files Handling Memory Corruption

Nullsoft Winamp is a popular multimedia player application that is capable of playing many formats of audio and video files. Winamp can play CD tracks, MP3 music files or MPEG video files as well as numerous other formats. It is also capable of reading MPEG-4 files which contain compressed audio...

Nullsoft Winamp Midi File Header Handling Buffer Overflow (CVE-2006-3228)

Winamp is a popular multimedia player, produced by Nullsoft, which is capable of playing many formats of audio and video files. Winamp can play CD tracks, MP3 music files or MPEG video files, as well as numerous other formats. A vulnerability exists in the MIDI file parsing component of Nullsoft...

Winamp JPEG和PNG整数溢出漏洞

Bugraq ID: 37387 Winamp是一款流行的媒体播放程序。 Winamp包含的"jpeg.w5s"和"png.w5s"过滤器处理媒体文件中的畸形的JPEG或PNG数据时存在整数溢出，构建恶意MP3诱使用户解析可导致以应用程序权限执行任意指令。 NullSoft Winamp 5.3.2 NullSoft Winamp 5.0 91 NullSoft Winamp 5.0 9 NullSoft Winamp 5.0 8c NullSoft Winamp 5.0 8 NullSoft Winamp 5.0 7 NullSoft Winamp 5.0 6 NullSoft...

Winamp模块解码器插件多个缓冲区溢出漏洞

Bugraq ID: 37374 CVE ID：CVE-2009-3995 CVE-2009-3996 CVE-2009-3997 Winamp是一款流行的媒体播放程序。 Winamp包含多个安全漏洞，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 -模块解码器插件INMOD.DLL解析Oktalyzer文件时存在整数溢出，可导致基于堆的缓冲区溢出。 -模块解码器插件INMOD.DLL解析Impulse Tracker文件时存在多个边界错误，可导致基于堆的缓冲区溢出。 -模块解码器插件INMOD.DLL解析Ultratracker文件时存在多个边界错误，可导致基于堆的缓冲区溢出。...

Nullsoft WinAmp Ultravox ultravox-max-msg Header Buffer Overflow (CVE-2006-5567)

NullSoft Winamp is a multimedia player that is capable of playing many formats of audio and video files and streaming protocols. Winamp supports the Ultravox media streaming format, a proprietary streaming media protocol developed by AOL. Ultravox or Ultravox Media On Demand Server UltraMODS is...

Winamp IN_CDDA.dll Buffer Overflow (CVE-2004-1119)

Winamp is a very popular multimedia player, produced by NullSoft, which is capable of playing many formats of audio and video files. One of the audio formats supported by Winamp is Compact-Disc-Digital-Audio CDDA, which is the format used on standard audio Compact Discs CD. When an audio CD is...

Nullsoft Winamp CAF File Processing Integer Overflow (CVE-2009-0186)

Nullsoft Winamp is a multimedia player application that is capable of playing many formats of audio and video files. Winamp can play CD tracks, MP3 music files or MPEG video files as well as numerous other formats. It is also capable of reading CAF media file which has file extension .caf. A...

SHOUTcast Filename Format String - ver 2 (CVE-2004-1373)

SHOUTcast is a free distributed streaming audio system developed by Nullsoft. It is widely used by Internet-based radio stations. The SHOUTcast server implements a subset of the HTTP protocol to communicate with clients. A client-server session starts with the client requesting an audio stream fr...

SHOUTcast Filename Format String (CVE-2004-1373)

SHOUTcast is a free distributed streaming audio system developed by Nullsoft. It is widely used by Internet-based radio stations. The SHOUTcast server implements a subset of the HTTP protocol to communicate with clients. A client-server session starts with the client requesting an audio stream fr...

Winamp XM File Heap Buffer Overflow (CVE-2004-1896)

Winamp is a popular media player for the Windows operating system. There is a buffer overflow within the parsing of .XM media files that can lead to arbitrary code execution. There is a buffer overflow in the .XM file type decoded within Winamp, a popular media file player for the Windows Operati...

Nullsoft Winamp AIFF Parsing Heap Buffer Overflow (CVE-2009-0263)

Nullsoft Winamp is a multimedia player application that is capable of playing many formats of audio and video files. Winamp can play CD tracks, MP3 music files or MPEG video files as well as numerous other formats. It is also capable of reading AIFF media file which has file extension "aiff". A...

Nullsoft Winamp Ultravox Streaming Metadata Parsing Stack Buffer Overflow (CVE-2008-0065)

NullSoft Winamp is a multimedia player that is capable of playing back many audio/video formats and streaming protocols. Winamp supports the Ultravox media streaming format, a proprietary streaming media protocol developed by AOL. There exists a buffer overflow vulnerability in Nullsoft Winamp...

Integer overflow

The Nullsoft Modern Skins Support module genff.dll in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via a crafted MAKI file, which triggers an incorrect sign extension, an integer overflow, and a stack-based buffer overflow...

CVE-2009-1831

The Nullsoft Modern Skins Support module genff.dll in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via a crafted MAKI file, which triggers an incorrect sign extension, an integer overflow, and a stack-based buffer overflow...