VLC媒体播放器字幕文件栈溢出漏洞

BUGTRAQ ID: 28274 CVECAN ID: CVE-2008-1881 VLC Media Player是一款免费的媒体播放器。 VLC播放器的modules/demux/subtitle.c文件的ParseSSA函数中存在栈溢出漏洞： if sscanf s, "Dialogue: %^,,%d:%d:%d.%d,%d:%d:%d.%d,%81920^\r\n", buffertext2, 如果用户受骗打开了SSA文件中的超长字幕的话，就可能触发这个溢出，导致执行任意指令。 VideoLAN VLC Media Player 0.8.6e Gentoo ------...

divx-Exploit.cpp.txt

// Exploit.cpp : Defines the entry point for the console application. // include "stdafx.h" / DivX Player =6.7 srt subtitle parsing exploit Coded by [email protected] Tested on Windows XP SP2 + DivX Player 6.7.0 Credit to securfrog for his PoC Actually this exploit is not relevant to DivX 6.6....

DivX Player 6.7 SRT File Subtitle Parsing Buffer Overflow Exploit

No description provided by source. // Exploit.cpp : Defines the entry point for the console application. // include "stdafx.h" / DivX Player =6.7 srt subtitle parsing exploit Coded by [email protected] Tested on Windows XP SP2 + DivX Player 6.7.0...

DivX Player 6.7 - '.srt' File Subtitle Parsing Buffer Overflow

// Exploit.cpp : Defines the entry point for the console application. // include "stdafx.h" / DivX Player =6.7 srt subtitle parsing exploit Coded by [email protected] Tested on Windows XP SP2 + DivX Player 6.7.0 Credit to securfrog for his PoC Actually this exploit is not relevant to DivX 6.6....

DivX Player 6.7 SRT File Subtitle Parsing Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ================================================================= DivX Player 6.7 SRT File Subtitle Parsing Buffer Overflow Exploit ================================================================= // Exploit.cpp : Defines the entry point fo...

DivX Player 6.7 - .srt File Subtitle Parsing Buffer Overflow

DivX Player 6.7 - .srt File Subtitle Parsing Buffer Overflow // Exploit.cpp : Defines the entry point for the console application. // include "stdafx.h" / DivX Player =6.7 srt subtitle parsing exploit Coded by [email protected] Tested on Windows XP SP2 + DivX Player 6.7.0 Credit to securfrog f...

SubEdit播放器字幕文件处理堆溢出漏洞

BUGTRAQ ID: 28858 SubEdit Player是在波兰广泛使用的播放器和字幕编辑器。 SubEdit Player在处理畸形格式的字幕文件时存在漏洞，如果用户受骗使用SubEdit播放器打开了包含有超长行的恶意字幕文件的话，就可能触发堆溢出，导致执行任意指令。 Arthur Sikora SubEdit Player Build 4066 Arthur Sikora ------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.subedit.com.pl/...

Stack overflow

Stack-based buffer overflow in DivX Player 6.7 build 6.7.0.22 and earlier allows user-assisted remote attackers to cause a denial of service application crash or execute arbitrary code via a long subtitle in a .SRT file...

CVE-2008-1912

Stack-based buffer overflow in DivX Player 6.7 build 6.7.0.22 and earlier allows user-assisted remote attackers to cause a denial of service application crash or execute arbitrary code via a long subtitle in a .SRT file...

CVE-2008-1912

Stack-based buffer overflow in DivX Player 6.7 build 6.7.0.22 and earlier allows user-assisted remote attackers to cause a denial of service application crash or execute arbitrary code via a long subtitle in a .SRT file...

DEBIAN-CVE-2008-1881

Stack-based buffer overflow in the ParseSSA function modules/demux/subtitle.c in VLC 0.8.6e allows remote attackers to execute arbitrary code via a long subtitle in an SSA file. NOTE: this issue is due to an incomplete fix for CVE-2007-6681...

CVE-2008-1881

Stack-based buffer overflow in the ParseSSA function modules/demux/subtitle.c in VLC 0.8.6e allows remote attackers to execute arbitrary code via a long subtitle in an SSA file. NOTE: this issue is due to an incomplete fix for CVE-2007-6681...

CVE-2008-1881

Stack-based buffer overflow in the ParseSSA function modules/demux/subtitle.c in VLC 0.8.6e allows remote attackers to execute arbitrary code via a long subtitle in an SSA file. NOTE: this issue is due to an incomplete fix for CVE-2007-6681...

DivX Player buffer overflow

Buffer overflow on .SRT subtitile files parsing...

divx-dos.txt

DIVX Player $file" or die "Cannot open $file: $!"; print $file "1 \n"; print $file "00:00:01,001 -- 00:00:02,001\n"; print $file $payload; close$file; print "$file has been created \n";...

DIVX Player <= 6.7.0 Buffer Overflow PoC ( .SRT )

DIVX Player = 6.7.0 Buffer Overflow PoC .SRT Bug: When parsing a subtitle file with an overly long subtitle DIVX player will deadly crash with eip overwritted Replace MOVIEFILENAME by your movie filename .avi !/usr/local/bin/perl my $file="MOVIEFILENAME.srt"; my $payload = "A" x 4096; open $file,...

VLC Media Player < 0.8.6f Multiple Vulnerabilities

The version of VLC Media Player installed on the remote host reportedly is affected by several security issues : - A subtitle buffer overflow CVE-2007-6681. - A Real RTSP code execution problem CVE-2008-0073. - MP4 integer overflows CVE-2008-1489. - A cinepak integer overflow. C Tenable Network...

VLC &lt;= 0.8.6e Subtitle Parsing Local Buffer Overflow Exploit

No description provided by source. / VLC =0.8.6.e Subtitle parsing local buffer overflow exploit Creadit to [email protected] vs Look2Me @ Tested on windows XP Pro SP2 / include stdio.h include stdlib.h include string.h char ssaheader= "Script Info\r\n" "Title: VLC = 0.8.6c,e buffer-overflow\r\n"...

VLC &lt;= 0.8.6e Subtitle Parsing Local Buffer Overflow Exploit

No description provided by source. / VLC =0.8.6.e Subtitle parsing local buffer overflow exploit Creadit to [email protected] vs Look2Me @ Tested on windows XP Pro SP2 / include stdio.h include stdlib.h include string.h char ssaheader= "Script Info\r\n" "Title: VLC = 0.8.6c,e buffer-overflow\r\n"...

VideoLAN VLC Media Player 0.8.6e - Subtitle Parsing Local Buffer Overflow

VideoLAN VLC Media Player 0.8.6e - Subtitle Parsing Local Buffer Overflow / VLC include include char ssaheader= "Script Info\r\n" "Title: VLC version 8.06.c\r\n"; printf"2 version 8.06.d\r\n"; print...