Streamripper multiple buffer overflows

Buffer overflows on HTTP response headers parsing, .m3u and .pls playlists parsing...

powerdvd_bof.pl.txt

!/usr/bin/perl CyberLink PowerDVD ./evillist.m3u"; or .pls print m3u "$buffer"; print "\n-- Evil Playlist created... Have fun!\n"; July, 2008...

Apple iTunes Playlist Local Parsing Buffer Overflow Exploit

No description provided by source. / PoC for iTunes on OS X 10.3.7 - [email protected] - Generates a .pls file, when loaded in iTunes it binds a shell to port 4444. Shellcode contains no \x00 or \x0a's. sample output: -nemo@gir:$ ./fm-eyetewnz foo.pls - fm-eyetewnz - - [email protected] -...

Rhythmbox media player buffer overflow

Buffer overflow on .pls files parsing...

FreeBSD : linux-realplayer -- multiple vulnerabilities (f762ccbb-baed-11dc-a302-000102cc8983)

Secunia reports : Multiple vulnerabilities have been reported in RealPlayer/RealOne/HelixPlayer, which can be exploited by malicious people to compromise a user's system. An input validation error when processing .RA/.RAM files can be exploited to cause a heap corruption via a specially crafted...

CVE-2007-6533

Buffer overflow in Zoom Player 6.00 beta 2 and earlier allows user-assisted remote attackers to execute arbitrary code via an HTTP link to a PLS file in a crafted ZPL file, which causes an overflow in Unicode handling when generating an error message...

CVE-2007-4599

Stack-based buffer overflow in RealNetworks RealPlayer 10 and possibly 10.5, and RealOne Player 1 and 2, for Windows allows remote attackers to execute arbitrary code via a crafted playlist PLS file...

RealNetworks RealPlayer PLS File Memory Corruption Vulnerability

This vulnerability allows remote attackers to execute code on vulnerable installations of RealPlayer. User interaction is required in that a user must open a malicious .pls file or visit a malicious web site. The specific flaw exists during the parsing of corrupted playlist files. Malicious...

linux-realplayer -- multiple vulnerabilities

Secunia reports: Multiple vulnerabilities have been reported in RealPlayer/RealOne/HelixPlayer, which can be exploited by malicious people to compromise a user's system. An input validation error when processing .RA/.RAM files can be exploited to cause a heap corruption via a specially crafted...

Buffer overflow

Buffer overflow in AtomixMP3 2.3 allows user-assisted remote attackers to execute arbitrary code via long strings in file and title fields in a .pls file, as demonstrated by the 1 File1 and 2 Title1 fields, different vectors than CVE-2006-6287 and CVE-2007-2487...

CVE-2007-4803

Buffer overflow in AtomixMP3 2.3 allows user-assisted remote attackers to execute arbitrary code via long strings in file and title fields in a .pls file, as demonstrated by the 1 File1 and 2 Title1 fields, different vectors than CVE-2006-6287 and CVE-2007-2487...

CVE-2007-4803

Buffer overflow in AtomixMP3 2.3 allows user-assisted remote attackers to execute arbitrary code via long strings in file and title fields in a .pls file, as demonstrated by the 1 File1 and 2 Title1 fields, different vectors than CVE-2006-6287 and CVE-2007-2487...

AtomixMP3 2.3 - .pls Local Buffer Overflow

AtomixMP3 2.3 - .pls Local Buffer Overflow 0x77394540 jmp esp in mswsock.dll Winxp Pro Version 2002 exploit : A x 516 +EIP - jmp esp - 4 + Nops -10 + Shellcode By : 0x58 greetz : miyyet,,diablos5s5,,vxroot,,Str0ke,,Metasploit Moroccan Hackers ! / win32exec - EXITFUNC=seh CMD=calc.exe Size=164...

Apple ITunes 4.7 Playlist Buffer Overflow

This module exploits a stack buffer overflow in Apple ITunes 4.7 build 4.7.0.42. By creating a URL link to a malicious PLS file, a remote attacker could overflow a buffer and execute arbitrary code. When using this module, be sure to set the URIPATH with an extension of '.pls'. This module requir...

AtomixMP3 M3U/PLS播放列表解析缓冲区溢出漏洞

AtomixMP3是一个电脑用的混音软件，可以将两首歌曲混在一起。 AtomixMP3在处理畸形的M3U、PLS文件时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 AtomixMP3在解析包含有超长文件名（大于520字节）的M3U和PLS播放列表文件时存在栈溢出漏洞。如果用户受骗加载了恶意的播放列表文件的话就会触发这个漏洞，导致执行任意指令。 AtomixMP3 AtomixMP3 2.3 AtomixMP3 --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

VUPlayer M3U/PLS播放列表解析缓冲区溢出漏洞

VUPlayer是Windows平台下的一款免费音频播放器，支持多种格式。 VUPlayer在处理畸形的M3U及PLS文件时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 VUPlayer在解析包含有超长文件名（大于1012字节）的M3U和PLS播放列表文件时存在栈溢出漏洞。如果用户受骗加载了恶意的播放列表文件的话就会触发这个漏洞，导致执行任意指令。 VUPlayer VUPlayer 2.44 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.vuplayer.com/vuplayer.php...

CVE-2006-6261

Buffer overflow in Quintessential Player 4.50.1.82 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted 1 M3u or 2 M3u-8 file; or a 3 crafted PLS file with a long value in the a NumberofEntries, b Length aka Length1, c Filename a...

CVE-2006-6261

Buffer overflow in Quintessential Player 4.50.1.82 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted 1 M3u or 2 M3u-8 file; or a 3 crafted PLS file with a long value in the a NumberofEntries, b Length aka Length1, c Filename a...

Quintessential Player buffer overflow

.PLS, .M3U, M3u-8 playlists buffer overflow...

XMPlay Playlist文件缓冲区溢出漏洞

XMPlay是一款媒体播放程序。 XMPlay不正确处理播放文件数据，远程攻击者可以利用漏洞进行缓冲区溢出攻击，可能以进程权限执行任意指令。 问题是在处理播放文件中的M3U中的DisplayName字段或FileName字段时缺少正确的边界条件检查，可造成以应用程序权限执行任意指令。 XMPlayer XMPlayer 3.3 4 http://www.un4seen.com/xmplay.html 0-day XMPlay 3.3.0.4 .PLS Filename Buffer Overflow Exploit /...