Stack overflow

Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code via an an invalid RealText rt subtitle file, related to the ParseRealText function in modules/demux/subtitle.c. NOTE: this issue was SPLIT from CVE-2008-5032 o...

CVE-2008-5036

Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code via an an invalid RealText rt subtitle file, related to the ParseRealText function in modules/demux/subtitle.c. NOTE: this issue was SPLIT from CVE-2008-5032 o...

CVE-2008-5036

VLC Media Player 0.9.x before 0.9.6 is vulnerable to a stack-based buffer overflow in the RealText subtitle parser. The issue arises in the ParseRealText function (modules/demux/subtitle.c) and can allow an attacker to execute arbitrary code when a specially crafted RealText (.rt) subtitle file i...

CVE-2008-5036

Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code via an an invalid RealText rt subtitle file, related to the ParseRealText function in modules/demux/subtitle.c. NOTE: this issue was SPLIT from CVE-2008-5032 o...

VLC Media Player 0.5.0 to 0.9.5 Stack-Based Buffer Overflows

A version of VLC between 0.5.0 and 0.9.5 is installed on the remote host. Such versions are affected by the following vulnerabilities : - RealText subtitle file modules\demux\subtitle.c processing is susceptible to a buffer overflow caused by user-supplied data from a malicious subtitle file bein...

CVE-2008-5036: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code via an an invalid RealText rt subtitle file, related to the ParseRealText function in modules/demux/subtitle.c. NOTE: this issue was SPLIT from CVE-2008-5032 o...

VLC Media Player RealText Subtitle Overflow

This module exploits a stack buffer overflow vulnerability in VideoLAN VLC use exploit/windows/fileformat/vlc/realtext msf undefinedrealtext show actions ...actions... msf undefinedrealtext set ACTION msf undefinedrealtext show options ...show and set options... msf undefinedrealtext run This...

Heap overflow

Heap-based buffer overflow in SubEdit Player build 4056 and 4066 allows remote attackers to cause a denial of service crash or execute arbitrary code via a long subtitle file...

CVE-2008-1973

Heap-based buffer overflow in SubEdit Player build 4056 and 4066 allows remote attackers to cause a denial of service crash or execute arbitrary code via a long subtitle file...

CVE-2008-1973

Heap-based buffer overflow in SubEdit Player build 4056 and 4066 allows remote attackers to cause a denial of service crash or execute arbitrary code via a long subtitle file...

CVE-2008-1973: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in SubEdit Player build 4056 and 4066 allows remote attackers to cause a denial of service crash or execute arbitrary code via a long subtitle file...

Kantaris 0.3.4 - SSA Subtitle Local Buffer Overflow

Kantaris 0.3.4 - SSA Subtitle Local Buffer Overflow !/usr/bin/python Kantaris 0.3.4 Media Player Local Buffer Overflow 0day! The following exploit will make a film.ssa file, just rename the file with the name of your movie, and use your imagination to pwn! : Shellcode is local bind shell, just...

VLC媒体播放器字幕文件栈溢出漏洞

BUGTRAQ ID: 28274 CVECAN ID: CVE-2008-1881 VLC Media Player是一款免费的媒体播放器。 VLC播放器的modules/demux/subtitle.c文件的ParseSSA函数中存在栈溢出漏洞： if sscanf s, "Dialogue: %^,,%d:%d:%d.%d,%d:%d:%d.%d,%81920^\r\n", buffertext2, 如果用户受骗打开了SSA文件中的超长字幕的话，就可能触发这个溢出，导致执行任意指令。 VideoLAN VLC Media Player 0.8.6e Gentoo ------...

divx-Exploit.cpp.txt

// Exploit.cpp : Defines the entry point for the console application. // include "stdafx.h" / DivX Player =6.7 srt subtitle parsing exploit Coded by [email protected] Tested on Windows XP SP2 + DivX Player 6.7.0 Credit to securfrog for his PoC Actually this exploit is not relevant to DivX 6.6....

DivX Player 6.7 SRT File Subtitle Parsing Buffer Overflow Exploit

No description provided by source. // Exploit.cpp : Defines the entry point for the console application. // include "stdafx.h" / DivX Player =6.7 srt subtitle parsing exploit Coded by [email protected] Tested on Windows XP SP2 + DivX Player 6.7.0...

DivX Player 6.7 - '.srt' File Subtitle Parsing Buffer Overflow

// Exploit.cpp : Defines the entry point for the console application. // include "stdafx.h" / DivX Player =6.7 srt subtitle parsing exploit Coded by [email protected] Tested on Windows XP SP2 + DivX Player 6.7.0 Credit to securfrog for his PoC Actually this exploit is not relevant to DivX 6.6....

DivX Player 6.7 SRT File Subtitle Parsing Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ================================================================= DivX Player 6.7 SRT File Subtitle Parsing Buffer Overflow Exploit ================================================================= // Exploit.cpp : Defines the entry point fo...

DivX Player 6.7 - .srt File Subtitle Parsing Buffer Overflow

DivX Player 6.7 - .srt File Subtitle Parsing Buffer Overflow // Exploit.cpp : Defines the entry point for the console application. // include "stdafx.h" / DivX Player =6.7 srt subtitle parsing exploit Coded by [email protected] Tested on Windows XP SP2 + DivX Player 6.7.0 Credit to securfrog f...

SubEdit播放器字幕文件处理堆溢出漏洞

BUGTRAQ ID: 28858 SubEdit Player是在波兰广泛使用的播放器和字幕编辑器。 SubEdit Player在处理畸形格式的字幕文件时存在漏洞，如果用户受骗使用SubEdit播放器打开了包含有超长行的恶意字幕文件的话，就可能触发堆溢出，导致执行任意指令。 Arthur Sikora SubEdit Player Build 4066 Arthur Sikora ------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.subedit.com.pl/...

Stack overflow

Stack-based buffer overflow in DivX Player 6.7 build 6.7.0.22 and earlier allows user-assisted remote attackers to cause a denial of service application crash or execute arbitrary code via a long subtitle in a .SRT file...