9518 matches found
Asterisk 1.6 IAX - 'POKE' Requests Remote Denial of Service
source: https://www.securityfocus.com/bid/30321/info Asterisk is prone to a remote denial-of-service vulnerability because it fails to handle multiple 'POKE' requests in quick succession. Attackers can exploit this issue by sending a persistent stream of 'POKE' requests that will consume processo...
Update Protection against Microsoft MJPEG Decoder Vulnerability (MS08-033)
A remote code execution vulnerability has been reported in the way that the Windows MJPEG Codec handles MJPEG streams in media files. MJPEG is a media file that contains a number of JPEG images that have been connected together to create a video stream. A remote attacker may exploit this...
linux/x86 snoop /dev/dsp shellcode 172 bytes
No description provided by source. / Placed the listener here http://www.milw0rm.com/down.php?id=1293 /str0ke / / hey folks, this is snoopshell, short and simply it snoops on /dev/dsp and after attempting to lower the audio quality will stream any data read on this device over a udp stream to a...
CVE-2008-0011
Microsoft DirectX 8.1 through 9.0c, and DirectX on Microsoft XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, does not properly perform MJPEG error checking, which allows remote attackers to execute arbitrary code via a crafted MJPEG stream in a 1 AVI or 2 ASF file, a...
Microsoft DirectX SAMI文件及MJPEG视频流解析栈溢出漏洞（MS08-032）
BUGTRAQ ID: 29581,29578 CVECAN ID: CVE-2008-0011,CVE-2008-1444 Microsoft DirectX是Windows操作系统中的一项功能，流媒体在玩游戏或观看视频时通过这个功能支持图形和声音。 DirectX在解析SAMI文件中的Class Name变量属性参数时存在栈溢出漏洞，Windows MJPEG Codec在解析ASF或AVI媒体文件中内嵌的MJPEG音频流时存在另一个栈溢出漏洞。如果用户受骗打开或预览了恶意的媒体文件的话，就可以触发这些溢出，导致执行任意指令。 Microsoft DirectX 9.0...
zlib DoS
zlib 1.2 and later versions allows remote attackers to cause a denial of service crash via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file...
MPlayer sdpplin_parse()函数RTSP整数溢出漏洞
BUGTRAQ ID: 28851 CVECAN ID: CVE-2008-1558 MPlayer是一款基于Linux的媒体播放程序，支持多种媒体格式。 MPlayer的stream/realrtsp/sdpplin.c文件中的sdpplinparse函数存在整数溢出漏洞： sdpplinparsestream desc-streamid=atoibuf; spplinparse desc-streamstream-streamid=stream; 如果用户所打开的媒体文件中包含有超长的StreamCount SDP参数的话，就可以触发这个溢出，导致执行任意指令。 MPlayer 1....
Debian DSA-1552-1 : mplayer - missing input sanitising
It was discovered that the MPlayer movie player performs insufficient input sanitising on SDP session data, leading to potential execution of arbitrary code through a malformed multimedia stream. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
Debian Security Advisory DSA 1552-1 (mplayer)
The remote host is missing an update to mplayer announced via advisory DSA 1552-1. OpenVAS Vulnerability Test $Id: deb15521.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1552-1 mplayer Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
DSA-1552-1 mplayer - arbitrary code execution
Bulletin has no description...
Heap overflow
Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an OLE file with a crafted DocumentSummaryInformation stream...
CVE-2008-0320
Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an OLE file with a crafted DocumentSummaryInformation stream...
Debian DSA-1543-1 : vlc - several vulnerabilities
Luigi Auriemma, Alin Rad Pop, Remi Denis-Courmont, Quovodis, Guido Landi, Felipe Manzano, Anibal Sacco and others discovered multiple vulnerabilities in vlc, an application for playback and streaming of audio and video. In the worst case, these weaknesses permit a remote, unauthenticated attacker...
Secunia Research: Internet Explorer Data Stream Handling Vulnerability
====================================================================== Secunia Research 08/04/2008 - Internet Explorer Data Stream Handling Vulnerability - ====================================================================== Table of Contents Affected...
CVE-2008-1085
Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6 through SP1, and 7 allows remote attackers to execute arbitrary code via a crafted data stream that triggers memory corruption, as demonstrated using an invalid MIME-type that does not have a registered handler...
CVE-2008-1085
Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6 through SP1, and 7 allows remote attackers to execute arbitrary code via a crafted data stream that triggers memory corruption, as demonstrated using an invalid MIME-type that does not have a registered handler...
Microsoft Internet Explorer Data Stream Handling Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability because it fails to adequately handle certain user-supplied data. Attackers can leverage this issue to execute arbitrary code with the privileges of the application. Successful exploits will compromise...
Debian Security Advisory DSA 1537-1 (xpdf)
The remote host is missing an update to xpdf announced via advisory DSA 1537-1. OpenVAS Vulnerability Test $Id: deb15371.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1537-1 xpdf Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Unfixed XSS vulnerability at www.south-stream.fr
Security researcher xylitol, has submitted on 04/06/2008 a cross-site-scripting XSS vulnerability affecting www.south-stream.fr, which at the time of submission ranked 118134 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008. It is...