253 matches found
Winamp <= 5.12 (Crafted PLS) Remote Buffer Overflow Exploit (meta)
No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...
CVE-2005-0043
CVE-2005-0043 is a buffer overflow in Apple iTunes 4.7 (build 4.7.0.42) triggered by long URLs in .m3u/.pls playlist files. The vulnerability, caused by improper parsing of playlist entries, could allow remote code execution and was publicly addressed in iTunes 4.7.1. Public references include iD...
CVE-2005-0043: Undefined Security Weakness
Buffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long URL in 1 .m3u or 2 .pls playlist files...
Apple iTunes - Playlist Parsing Local Buffer Overflow
Apple iTunes - Playlist Parsing Local Buffer Overflow / PoC for iTunes on OS X 10.3.7 - [email protected] - Generates a .pls file, when loaded in iTunes it binds a shell to port 4444. Shellcode contains no \x00 or \x0a's. sample output: -nemo@gir:$ ./fm-eyetewnz foo.pls - fm-eyetewnz - -...
Apple ITunes 4.7 Playlist Buffer Overflow
This module exploits a stack buffer overflow in Apple ITunes 4.7 build 4.7.0.42. By creating a URL link to a malicious PLS file, a remote attacker could overflow a buffer and execute arbitrary code. When using this module, be sure to set the URIPATH with an extension of '.pls'. Module Options msf...
CVE-2004-0964
CVE-2004-0964 concerns Zinf Audio Player. The available connected sources confirm a stack/buffer overflow vulnerability in Zinf Audio Player 2.2.1 (Windows) and older Linux builds triggered by crafted .pls files. Affected component: PLS file handling in Zinf; root cause: insufficient bounds check...
CVE-2004-0964
Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to execute arbitrary code via certain values in a .pls file...
CVE-2004-0964: Undefined Security Weakness
Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to execute arbitrary code via certain values in a .pls file...
CVE-2000-0049
The CVE-2000-0049 vulnerability is a buffer overflow in the Winamp client triggered by a long entry in a .pls file, enabling remote command execution. Documents identify the affected software as Winamp and describe the vulnerability type as a buffer overflow in processing crafted playlist entries...
CVE-2000-0049
Buffer overflow in Winamp client allows remote attackers to execute commands via a long entry in a .pls file...
CVE-2000-0049: Undefined Security Weakness
Buffer overflow in Winamp client allows remote attackers to execute commands via a long entry in a .pls file...
winamp.win98.txt
Author: Steve Fewer, [email protected] http://indigo.ie/lmf Introduction: I recently uncovered a stack based buffer overflow in winamp version 2.10 which lets me execute 'arbitrary code'. It is=20 carried out through .pls files which winamp uses for playlists.=20 This is unnerving as it is a...
