MPlayer - '.SAMI' Subtitle File Buffer Overflow (DEP Bypass) (Metasploit)

require 'msf/core' class MetasploitModule 'Mplayer SAMI Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow found in SMPlayer 0.6.9 Permanent DEP /AlwaysON. The overflow is triggered during the parsing of an overly long string found in a malicious SAMI subtitle...

Subtitle Processor 7.7.1 .M3U SEH Unicode Buffer Overflow

This module exploits a vulnerability found in Subtitle Processor 7. By supplying a long string of data as a .m3u file, Subtitle Processor first converts this input in Unicode, which expands the string size, and then attempts to copy it inline on the stack. This results a buffer overflow with SEH...

Subtitle Processor 7.7.1 .M3U SEH Unicode Buffer Overflow

$Id: subtitleprocessorm3ubof.rb 12461 2011-04-28 08:12:32Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Subtitle Processor 7.7.1 SEH Unicode Buffer Overflow Exploit

Exploit for windows platform in category local exploits !/usr/bin/python I wanted to first of all thank all the people who took the time to help me. Peter Van Eeckhoutte AKA corelanc0d3r. Awesome tutorials and thanks for putting up with me! Jason Kratzer. Thanks a lot for helping me finish this...

Subtitle Processor 7.7.1 - '.m3u' File Buffer Overflow (SEH Unicode) (Metasploit)

$Id: subtitleprocessorm3ubof.rb 12461 2011-04-28 08:12:32Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Subtitle Processor 7.7.1 - Local Buffer Overflow (SEH Unicode)

Subtitle Processor 7.7.1 - Local Buffer Overflow SEH Unicode !/usr/bin/python I wanted to first of all thank all the people who took the time to help me. Peter Van Eeckhoutte AKA corelanc0d3r. Awesome tutorials and thanks for putting up with me! Jason Kratzer. Thanks a lot for helping me finish...

Subtitle Processor 7.7.1 - Local Buffer Overflow (SEH Unicode)

!/usr/bin/python I wanted to first of all thank all the people who took the time to help me. Peter Van Eeckhoutte AKA corelanc0d3r. Awesome tutorials and thanks for putting up with me! Jason Kratzer. Thanks a lot for helping me finish this exploit and showing me techniques! Subtitle Processor 7.7...

Memory corruption

The StripTags function in 1 the USF decoder modules/codec/subtitles/subsdec.c and 2 the Text decoder modules/codec/subtitles/subsusf.c in VideoLAN VLC Media Player 1.1 before 1.1.6-rc allows remote attackers to execute arbitrary code via a subtitle with an opening "" in an MKV file, which trigger...

CVE-2011-0522

The StripTags function in 1 the USF decoder modules/codec/subtitles/subsdec.c and 2 the Text decoder modules/codec/subtitles/subsusf.c in VideoLAN VLC Media Player 1.1 before 1.1.6-rc allows remote attackers to execute arbitrary code via a subtitle with an opening "" in an MKV file, which trigger...

CVE-2011-0522

CVE-2011-0522 affects VLC Media Player 1.1 and earlier, where the StripTags path in USF and Text subtitle decoders (subsdec.c, subsusf.c) can be triggered by a specially crafted MKV subtitle containing an opening “”. This leads to heap memory corruption and remote code execution as demonstrated b...

CVE-2011-0522

The StripTags function in 1 the USF decoder modules/codec/subtitles/subsdec.c and 2 the Text decoder modules/codec/subtitles/subsusf.c in VideoLAN VLC Media Player 1.1 before 1.1.6-rc allows remote attackers to execute arbitrary code via a subtitle with an opening "" in an MKV file, which trigger...

VLC Media Player Subtitle StripTags() Function Memory Corruption

Exploit for multiple platform in category dos / poc Source: http://www.securityfocus.com/bid/46008/info VLC media player is prone to a heap-based memory-corruption vulnerability. Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cau...

VideoLAN VLC Media Player 1.1 - Subtitle 'StripTags()' Memory Corruption

Source: https://www.securityfocus.com/bid/46008/info VLC media player is prone to a heap-based memory-corruption vulnerability. Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions. An attacker can...

Fedora Update for gnome-subtitles FEDORA-2010-15628

Check for the Version of gnome-subtitles OpenVAS Vulnerability Test Fedora Update for gnome-subtitles FEDORA-2010-15628 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

XSS vulnerability in Zomplog

Vulnerability ID: HTB22642 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinzomplog.html Product: Zomplog Vendor: Gerben Schmidt http://www.zomp.nl/zomplog/ Vulnerable Version: 3.9 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability Type: XSS Cross Site...

Fedora Update for gnome-subtitles FEDORA-2010-15711

Check for the Version of gnome-subtitles OpenVAS Vulnerability Test Fedora Update for gnome-subtitles FEDORA-2010-15711 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Fedora Update for gnome-subtitles FEDORA-2010-15717

Check for the Version of gnome-subtitles OpenVAS Vulnerability Test Fedora Update for gnome-subtitles FEDORA-2010-15717 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

[SECURITY] Fedora 13 Update: gnome-subtitles-1.0-3.fc13

Gnome Subtitles is a subtitle editor for the GNOME desktop. It supports the most common text-based subtitle formats and allows for subtitle editing, translation and synchronization...

[SECURITY] Fedora 12 Update: gnome-subtitles-1.0-3.fc12

Gnome Subtitles is a subtitle editor for the GNOME desktop. It supports the most common text-based subtitle formats and allows for subtitle editing, translation and synchronization...

[SECURITY] Fedora 14 Update: gnome-subtitles-1.0-3.fc14

Gnome Subtitles is a subtitle editor for the GNOME desktop. It supports the most common text-based subtitle formats and allows for subtitle editing, translation and synchronization...