Subtitle Processor 7.7.1 - Local Buffer Overflow (SEH Unicode)

!/usr/bin/python I wanted to first of all thank all the people who took the time to help me. Peter Van Eeckhoutte AKA corelanc0d3r. Awesome tutorials and thanks for putting up with me! Jason Kratzer. Thanks a lot for helping me finish this exploit and showing me techniques! Subtitle Processor 7.7...

Subtitle Processor 7.7.1 .M3U SEH Unicode Buffer Overflow

This module exploits a vulnerability found in Subtitle Processor 7. By supplying a long string of data as a .m3u file, Subtitle Processor first converts this input in Unicode, which expands the string size, and then attempts to copy it inline on the stack. This results a buffer overflow with SEH...

Memory corruption

The StripTags function in 1 the USF decoder modules/codec/subtitles/subsdec.c and 2 the Text decoder modules/codec/subtitles/subsusf.c in VideoLAN VLC Media Player 1.1 before 1.1.6-rc allows remote attackers to execute arbitrary code via a subtitle with an opening "" in an MKV file, which trigger...

CVE-2011-0522

The StripTags function in 1 the USF decoder modules/codec/subtitles/subsdec.c and 2 the Text decoder modules/codec/subtitles/subsusf.c in VideoLAN VLC Media Player 1.1 before 1.1.6-rc allows remote attackers to execute arbitrary code via a subtitle with an opening "" in an MKV file, which trigger...

CVE-2011-0522

CVE-2011-0522 affects VLC Media Player 1.1 and earlier, where the StripTags path in USF and Text subtitle decoders (subsdec.c, subsusf.c) can be triggered by a specially crafted MKV subtitle containing an opening “”. This leads to heap memory corruption and remote code execution as demonstrated b...

CVE-2011-0522

The StripTags function in 1 the USF decoder modules/codec/subtitles/subsdec.c and 2 the Text decoder modules/codec/subtitles/subsusf.c in VideoLAN VLC Media Player 1.1 before 1.1.6-rc allows remote attackers to execute arbitrary code via a subtitle with an opening "" in an MKV file, which trigger...

VLC Media Player Subtitle StripTags() Function Memory Corruption

Exploit for multiple platform in category dos / poc Source: http://www.securityfocus.com/bid/46008/info VLC media player is prone to a heap-based memory-corruption vulnerability. Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cau...

VideoLAN VLC Media Player 1.1 - Subtitle 'StripTags()' Memory Corruption

Source: https://www.securityfocus.com/bid/46008/info VLC media player is prone to a heap-based memory-corruption vulnerability. Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions. An attacker can...

Fedora Update for gnome-subtitles FEDORA-2010-15628

Check for the Version of gnome-subtitles OpenVAS Vulnerability Test Fedora Update for gnome-subtitles FEDORA-2010-15628 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

XSS vulnerability in Zomplog

Vulnerability ID: HTB22642 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinzomplog.html Product: Zomplog Vendor: Gerben Schmidt http://www.zomp.nl/zomplog/ Vulnerable Version: 3.9 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability Type: XSS Cross Site...

Fedora Update for gnome-subtitles FEDORA-2010-15711

Check for the Version of gnome-subtitles OpenVAS Vulnerability Test Fedora Update for gnome-subtitles FEDORA-2010-15711 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Fedora Update for gnome-subtitles FEDORA-2010-15717

Check for the Version of gnome-subtitles OpenVAS Vulnerability Test Fedora Update for gnome-subtitles FEDORA-2010-15717 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

[SECURITY] Fedora 13 Update: gnome-subtitles-1.0-3.fc13

Gnome Subtitles is a subtitle editor for the GNOME desktop. It supports the most common text-based subtitle formats and allows for subtitle editing, translation and synchronization...

[SECURITY] Fedora 12 Update: gnome-subtitles-1.0-3.fc12

Gnome Subtitles is a subtitle editor for the GNOME desktop. It supports the most common text-based subtitle formats and allows for subtitle editing, translation and synchronization...

[SECURITY] Fedora 14 Update: gnome-subtitles-1.0-3.fc14

Gnome Subtitles is a subtitle editor for the GNOME desktop. It supports the most common text-based subtitle formats and allows for subtitle editing, translation and synchronization...

Subtitle Translation Wizard '.srt' File Stack Based Buffer Overflow Vulnerability

Subtitle Translation Wizard is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Subtitle Translation Wizard '.srt' File Stack Based Buffer Overflow Vulnerability

This host is installed with Subtitle Translation Wizard and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbsubtitletranslationwizardbofvuln.nasl 5374 2017-02-20 16:36:11Z cfi $ Subtitle Translation Wizard '.srt' File Stack Based Buffer Overflow Vulnerability Authors:...

Stack overflow

Stack-based buffer overflow in st-wizard.exe in Subtitle Translation Wizard 3.0 allows user-assisted remote attackers to execute arbitrary code via a crafted SRT file with a long line after a time range. NOTE: some of these details are obtained from third party information...

CVE-2010-2440

CVE-2010-2440 affects Subtitle Translation Wizard 3.0: a stack-based buffer overflow in st-wizard.exe allows a crafted SRT file with a long line after a time range to potentially execute arbitrary code. Descriptions in multiple sources (NVD/RedHat/OpenVAS entries) confirm user-assisted remote cod...

CVE-2010-2440

Stack-based buffer overflow in st-wizard.exe in Subtitle Translation Wizard 3.0 allows user-assisted remote attackers to execute arbitrary code via a crafted SRT file with a long line after a time range. NOTE: some of these details are obtained from third party information...