CVE-2010-2440: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in st-wizard.exe in Subtitle Translation Wizard 3.0 allows user-assisted remote attackers to execute arbitrary code via a crafted SRT file with a long line after a time range. NOTE: some of these details are obtained from third party information...

Subtitle Translation Wizard 3.0.0 Proof Of Concept

Exploit Title: Subtitle Translation Wizard v3.0.0 SEH POC Date: Jun 21, 2010 Author: Blake Software Link: http://www.upredsun.com/subtitle-translation/download/st-wizard-setup.exe Version: 3.0.0 Tested on: Windows Vista running in VirtualBox SEH is overwritten but only unicode compatible pop pop...

Subtitle Translation Wizard 3.0.0 - Overflow (SEH) (PoC)

!/usr/bin/python Exploit Title: Subtitle Translation Wizard v3.0.0 SEH POC Date: Jun 21, 2010 Author: Blake Software Link: http://www.upredsun.com/subtitle-translation/download/st-wizard-setup.exe Version: 3.0.0 Tested on: Windows Vista running in VirtualBox SEH is overwritten but only unicode...

Subtitle Translation Wizard 3.0.0 - Overflow (SEH) (PoC)

Subtitle Translation Wizard 3.0.0 - Overflow SEH PoC !/usr/bin/python Exploit Title: Subtitle Translation Wizard v3.0.0 SEH POC Date: Jun 21, 2010 Author: Blake Software Link: http://www.upredsun.com/subtitle-translation/download/st-wizard-setup.exe Version: 3.0.0 Tested on: Windows Vista running...

CVE-2010-1995: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in TomatoCMS before 2.0.5 allow remote authenticated users, with "Add new article" privileges, to inject arbitrary web script or HTML via the 1 title, 2 subTitle, and 3 author parameters in conjunction with a /admin/news/article/add...

CVE-2010-0364

Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg file with a crafted Advanced SubStation Alpha Subtitle .ass file, probably involving the Dialogue field...

DEBIAN-CVE-2010-0364

Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg file with a crafted Advanced SubStation Alpha Subtitle .ass file, probably involving the Dialogue field...

CVE-2010-0364

Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg file with a crafted Advanced SubStation Alpha Subtitle .ass file, probably involving the Dialogue field...

CVE-2010-0364

VLC Media Player 0.8.6 is affected by a stack-based buffer overflow when processing an ogg file containing a crafted Advanced SubStation Alpha Subtitle (.ass) file, likely in the Dialogue field. This allows user-assisted remote code execution. Multiple security feeds (OpenVAS and NVD) corroborate...

CVE-2010-0364

Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg file with a crafted Advanced SubStation Alpha Subtitle .ass file, probably involving the Dialogue field...

CVE-2010-0364: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg file with a crafted Advanced SubStation Alpha Subtitle .ass file, probably involving the Dialogue field...

CVE-2009-2896

Buffer overflow in KMplayer 2.9.4.1433 and earlier allows remote attackers to cause a denial of service application crash or execute arbitrary code via a long string in a subtitle .srt playlist file. NOTE: some of these details are obtained from third party information...

Buffer overflow

Buffer overflow in KMplayer 2.9.4.1433 and earlier allows remote attackers to cause a denial of service application crash or execute arbitrary code via a long string in a subtitle .srt playlist file. NOTE: some of these details are obtained from third party information...

CVE-2009-2896

Buffer overflow in KMplayer 2.9.4.1433 and earlier allows remote attackers to cause a denial of service application crash or execute arbitrary code via a long string in a subtitle .srt playlist file. NOTE: some of these details are obtained from third party information...

Debian DSA-1819-1 : vlc - several vulnerabilities

Several vulnerabilities have been discovered in vlc, a multimedia player and streamer. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-1768 Drew Yao discovered that multiple integer overflows in the MP4 demuxer, Real demuxer and Cinepak codec can le...

GOM Player 2.1.16.6134 Subtitle Local Buffer Overflow PoC

No description provided by source. !/usr/local/bin/perl Title : GOM Player Subtitle Buffer Overflow Vulnerabiltity Discovery by : Bui Quang Minh Tested : GOM Player 2.1.16.6134 Reference : Bkis http://security.bkis.vn/?p=501 PoC : Windows XP Silently Crash and Windows Vista, Windows 7. my $buffer...

[Bkis-06-2009] GOM Player Subtitle Buffer Overflow Vulnerability

Bkis-06-2009 GOM Player Subtitle Buffer Overflow Vulnerability 1. General Information GOM Player is a popular multimedia player supporting multiple media formats avi, mpeg,…. In March 2009, Bkis has detected a vulnerability in this software. With this vulnerability, users might lose sensible...

GOM Player 2.1.16.6134 - Subtitle Local Buffer Overflow (PoC)

!/usr/local/bin/perl Title : GOM Player Subtitle Buffer Overflow Vulnerabiltity Discovery by : Bui Quang Minh Tested : GOM Player 2.1.16.6134 Reference : Bkis http://security.bkis.vn/?p=501 PoC : Windows XP Silently Crash and Windows Vista, Windows 7. my $buffer = "A" x 10240 x 4; my $filename =...

GOM Player 2.1.16.6134 Subtitle Local Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ========================================================= GOM Player 2.1.16.6134 Subtitle Local Buffer Overflow PoC ========================================================= !/usr/local/bin/perl Title : GOM Player Subtitle Buffer Overflow...

CVE-2009-1022

Heap-based buffer overflow in the Preview/ Set Segment function in Gretech GOMlab GOM Encoder 1.0.0.11 and earlier allows user-assisted remote attackers to cause a denial of service memory corruption and application crash or execute arbitrary code via a long text field in a subtitle .srt file...