EUVD-2007-5199

Malware in sbrugna...

PowerDVD Remote FREE - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application PowerDVD Remote FREE published at the 'play' market has multiple vulnerabilities...

PowerDVD 8.0 '.m3u' and '.pls' File Multiple Buffer Overflow Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/30341/info PowerDVD is prone to multiple buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied input. Successfully exploiting these issues may allow remote attackers to...

PowerDVD 11.0.0.2114 - Remote Denial of Service

source: https://www.securityfocus.com/bid/50953/info PowerDVD is prone to a denial-of-service vulnerability. Attackers may leverage this issue to crash the affected application, denying service to legitimate users. PowerDVD 11.0.0.2114 is vulnerable; other versions may also be affected. udpsz -c...

PowerDVD 11.0.0.2114 - Remote Denial of Service

PowerDVD 11.0.0.2114 - Remote Denial of Service source: https://www.securityfocus.com/bid/50953/info PowerDVD is prone to a denial-of-service vulnerability. Attackers may leverage this issue to crash the affected application, denying service to legitimate users. PowerDVD 11.0.0.2114 is vulnerable...

PowerDVD.exe 5.00.1107 DLL Hijacking Exploit

Exploit for windows platform in category local exploits ============================================ PowerDVD.exe 5.00.1107 DLL Hijacking Exploit ============================================ / Author: Inj3cti0n P4ck3t e-mail: email protected Date: 18/10/2010 Name BUG: PowerDVD 5.00.1107 DLL...

PowerDVD 5.0.1107 - trigger.dll DLL Loading Arbitrary Code Execution

PowerDVD 5.0.1107 - trigger.dll DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/44193/info PowerDVD is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable...

PowerDVD 5.0.1107 - 'trigger.dll' DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/44193/info PowerDVD is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a...

CyberLink PowerDVD PlayList File Handling Stack Overflow

CyberLink PowerDVD is a commercial video and audio player for Microsoft Windows and Linux. It enables viewing High-definition video and DVD-Video movies on the user's PC. The player can also be used to play videos and audio/music files in other formats encoded with different codecs, for instance...

KLA10132 DoS vulnerability in Cyberlink PowerDVD

A buffer overflow was found in Cyberlink PowerDVD. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed playlist. Original advisories Blog post Related products Cyberlink-PowerDVD CVE list Solution Upda...

powerdvd_bof.pl.txt

!/usr/bin/perl CyberLink PowerDVD ./evillist.m3u"; or .pls print m3u "$buffer"; print "\n-- Evil Playlist created... Have fun!\n"; July, 2008...

PowerDVD '.m3u'/'.pls'文件多个缓冲区溢出漏洞

BUGTRAQ ID: 30341 CNCAN ID：CNCAN-2008072307 PowerDVD是一款支持DVD播放的媒体程序。 PowerDVD处理'.m3u'/'.pls'文件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 构建恶意的'.m3u'/'.pls'文件，诱使用户访问，可触发此漏洞。 CyberLink PowerDVD 8.0 目前没有解决方案提供： http://www.cyberlink.com/english/products/powerdvd/webpages/main1ENUnew.html !/usr/bin/perl...

PowerDVD 8.0 - '.m3u' / '.pls' Multiple Buffer Overflow Vulnerabilities

source: https://www.securityfocus.com/bid/30341/info PowerDVD is prone to multiple buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied input. Successfully exploiting these issues may allow remote attackers to execute arbitrary code in the context ...

PowerDVD 8.0 - .m3u .pls Multiple Buffer Overflow Vulnerabilities

PowerDVD 8.0 - .m3u .pls Multiple Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/30341/info PowerDVD is prone to multiple buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied input. Successfully exploiting these issues ma...

CyberLink PowerDVD <= 8.0 Crafted PLS/M3U Playlist File BoF Vulnerability

Summary CyberLink PowerDVD is a commercial media player for Microsoft Windows and Linux. Several editions of the software are sold including "Ultra", "Deluxe" and "Standard". All editions support the viewing of DVD but only the Ultra edition supports Blu-ray playback. Description PowerDVD is pron...

Directory traversal

Directory traversal vulnerability in the CLAVSetting.CLSetting.1 ActiveX control in CLAVSetting.DLL 1.00.1829 in the CLAVSetting module in CyberLink PowerDVD 7.0 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the argument to the CreateNewFile method...

CVE-2007-5219

Directory traversal vulnerability in the CLAVSetting.CLSetting.1 ActiveX control in CLAVSetting.DLL 1.00.1829 in the CLAVSetting module in CyberLink PowerDVD 7.0 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the argument to the CreateNewFile method...

CVE-2007-5219

Directory traversal vulnerability in the CLAVSetting.CLSetting.1 ActiveX control in CLAVSetting.DLL 1.00.1829 in the CLAVSetting module in CyberLink PowerDVD 7.0 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the argument to the CreateNewFile method...

CVE-2007-5219

The CVE-2007-5219 issue affects CyberLink PowerDVD 7.0 via the CLAVSetting.DLL 1.00.1829 CLAVSetting.CLSetting.1 ActiveX control. The vulnerability is a directory traversal in CreateNewFile that allows remote attackers to create or overwrite arbitrary files by supplying a .. sequence in the argum...

CyberLink PowerDVD CreateNewFile Arbitrary Remote Rewrite DoS

No description provided by source. !-- CyberLink PowerDVD CLAVSetting Module CLAVSetting.DLL 1.00.1829 arbitrary remote rewrite dos this is installed by default on Acer Travelmate series allows to overwrite files with an empty one extension doesn't matter object safety report: RegKey Safe for...