EUVD-2019-19950

DVDXPlayer Pro 5.5 contains a local buffer overflow vulnerability with structured exception handling that allows local attackers to execute arbitrary code by crafting malicious playlist files. Attackers can create a specially crafted .plf file containing shellcode and NOP sleds that overflows a...

CVE-2019-25604 DVDXPlayer Pro 5.5 Local Buffer Overflow with SEH

DVDXPlayer Pro 5.5 contains a local buffer overflow vulnerability with structured exception handling that allows local attackers to execute arbitrary code by crafting malicious playlist files. Attackers can create a specially crafted .plf file containing shellcode and NOP sleds that overflows a...

CVE-2019-25604

CVE-2019-25604 : DVDXPlayer Pro 5.5 has a local buffer overflow vulnerability in which crafted .plf playlist files can overflow a buffer and hijack the SEH chain to execute arbitrary code with application privileges. The issue relies on structured exception handling to gain code execution locally...

CVE-2019-25604

DVDXPlayer Pro 5.5 contains a local buffer overflow vulnerability with structured exception handling that allows local attackers to execute arbitrary code by crafting malicious playlist files. Attackers can create a specially crafted .plf file containing shellcode and NOP sleds that overflows a...

CVE-2019-25604 DVDXPlayer Pro 5.5 Local Buffer Overflow with SEH

DVDXPlayer Pro 5.5 contains a local buffer overflow vulnerability with structured exception handling that allows local attackers to execute arbitrary code by crafting malicious playlist files. Attackers can create a specially crafted .plf file containing shellcode and NOP sleds that overflows a...

PT-2026-26992

DVDXPlayer Pro 5.5 contains a local buffer overflow vulnerability with structured exception handling that allows local attackers to execute arbitrary code by crafting malicious playlist files. Attackers can create a specially crafted .plf file containing shellcode and NOP sleds that overflows a...

EUVD-2011-5237

Malware in sbrugna...

EUVD-2009-4515

Malware in sbrugna...

EUVD-2009-3237

Malware in sbrugna...

CVE-2010-20111

Digital Music Pad v8.2.3.3.4 contains a stack-based buffer overflow vulnerability in its playlist file parser. When opening a .pls file containing an excessively long string in the File1 field, the application fails to properly validate input length, resulting in corruption of the Structured...

CVE-2010-20123

The CVE-2010-20123 entry concerns Steinberg MyMP3Player (version 3.0, build 3.0.0.67). It describes a stack-based buffer overflow triggered while parsing .m3u playlist files, due to improper validation of input length in the playlist data. The vulnerability allows an attacker to overwrite memory ...

PT-2025-34300 · Unknown · Millenium Mp3 Studio

Name of the Vulnerable Software and Affected Versions: Millenium MP3 Studio versions through 2.0 Description: Millenium MP3 Studio versions up to and including 2.0 are vulnerable to a stack-based buffer overflow when parsing .pls playlist files. The application does not properly validate the leng...

SourceForge Subtitle Processor 安全漏洞

SourceForge Subtitle Processor is an open source movie subtitle processing software from SourceForge. A security vulnerability exists in SourceForge Subtitle Processor version 7.7.1, which originates from a buffer overflow when parsing .m3u files and could lead to the execution of arbitrary code...

Xion Audio Player 安全漏洞

Xion Audio Player is an audio player from Xion Audio Player, Inc. A security vulnerability exists in Xion Audio Player versions prior to 1.0.126, which stems from a Unicode-based stack buffer overflow when processing specially crafted .m3u playlist files, which could lead to the execution of...

Cross-site Scripting (XSS)

copyparty is vulnerable to DOM-based Cross-site Scripting XSS. The vulnerability is due to improper sanitization of multimedia tags in music files, including m3u files, which allows an attacker to execute arbitrary JavaScript code in a victim's browser...

CVE-2012-10031

BlazeVideo HDTV Player Pro v6.6.0.3 is vulnerable to a stack-based buffer overflow due to improper handling of user-supplied input embedded in .plf playlist files. When parsing a crafted .plf file, the MediaPlayerCtrl.dll component invokes PathFindFileNameA to extract a filename from a URL-like...

PT-2025-31983 · Unknown +1 · Mediaplayerctrl.Dll +1

Name of the Vulnerable Software and Affected Versions: BlazeVideo HDTV Player Pro version 6.6.0.3 Description: BlazeVideo HDTV Player Pro version 6.6.0.3 is susceptible to a stack-based buffer overflow due to improper handling of user-supplied input within .plf playlist files. When processing a...

PeerTube 安全漏洞

PeerTube is a decentralized video sharing service platform open-sourced by Chocobozzz. It is used to create video projects. PeerTube suffers from a security vulnerability that stems from path traversal and could lead to the disclosure of arbitrary m3u8 files...

MediaCoder Buffer Overflow Vulnerability (CNVD-2017-26355)

MediaCoder is a set of free general-purpose audio and video transcoding tools developed by China's Huang Yichun. A buffer overflow vulnerability exists in version 0.8.48.5888 of MediaCoder. A remote attacker can exploit this vulnerability to execute arbitrary code via .m3u files...

ffmpeg and Libav cross-domain information disclosure vulnerability

Overview ffmpeg is a "cross-platform solution to record, convert and stream audio and video". ffmpeg is vulnerable to local file disclosure due to improper enforcement of domain restrictions when processing playlist files. Description CWE-201: Information Exposure Through Sent Data- CVE-2016-1897...