VideoLAN VLC Media Player MP4_BoxDumpStructure Buffer Overflow

Added: 12/07/2009 BID: 36439 OSVDB: 58217 Background VLC media player is a media player supporting various audio and video formats for multiple platforms. Problem A buffer overflow vulnerability exists in VideoLAN VLC media player due to an error when an overly deep box structure in ".mp4" files....

VideoLAN VLC Media Player 1.0.3 - smb: URI Handling Remote Stack Overflow (PoC)

VideoLAN VLC Media Player 1.0.3 - smb: URI Handling Remote Stack Overflow PoC !/usr/bin/env python VLC Media Player 1.0.3 smb:// URI Handling Remote Stack Overflow PoC Found By: DrIDE Tested: Windows 7 Download: http://www.videolan.org Note: Open the .xspf file. It looks like nothing happens but...

VideoLAN VLC Media Player 1.0.3 - 'smb://' URI Handling Remote Stack Overflow (PoC)

!/usr/bin/env python VLC Media Player 1.0.3 smb:// URI Handling Remote Stack Overflow PoC Found By: DrIDE Tested: Windows 7 Download: http://www.videolan.org Note: Open the .xspf file. It looks like nothing happens but close VLC you will get a crash header1 = "\n" header1 += "\n" header1 +=...

VideoLAN VLC TiVo Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'VideoLAN VLC TiVo...

VideoLAN VLC ReadRealIndex RealMedia Integer Overflow (CVE-2008-5276)

There exists a vulnerability in VideoLAN VLC Media Player. The vulnerability is caused due to an integer overflow when playing a specially crafted RealMedia .rm file. An unauthenticated remote attacker could exploit this vulnerability by enticing a user to play a specially crafted RealMedia file...

VideoLAN VLC Media Player 1.0.2 - smb: URI Stack Overflow

VideoLAN VLC Media Player 1.0.2 - smb: URI Stack Overflow VLC Media Player 1.0.2 smb:// URI Handling Remote Stack Overflow PoC Found By: DrIDE Tested: Windows XP SP2 , XP SP3 and Windows 7 RC1 with VLC 1.0.2 "Goldeneye" Download:...

VideoLAN VLC Media Player WAV Processing Integer Overflow (CVE-2008-2430)

VLC media player is an open source multimedia player. It can play many audio and video formats MPEG, DivX, ogg, Wave etc. as well as various streaming protocols. It is highly portable and available for multiple platforms. Support for various formats is implemented in the form of plugins bundled...

VideoLAN VLC Media Player SMB Module Win32AddConnection Buffer Overflow

Added: 09/11/2009 CVE: CVE-2009-2484 BID: 35500 OSVDB: 55509 Background VLC media player is a media player supporting various audio and video formats for multiple platforms. Problem A stack-based buffer overflow vulnerability in the Win32AddConnection function may allow a remote attacker to execu...

CVE-2009-2484

Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Microsoft Windows, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long smb URI in a playlist...

CVE-2009-2484: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Microsoft Windows, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long smb URI in a playlist...

VideoLAN VLC Media Player 0.9.9 smb:// URI Stack BOF PoC

No description provided by source. !/usr/bin/ruby VideoLAN VLC Media Player 0.9.9 smb:// URI Stack-based Buffer Overflow Proof-of-Concept Bugtraq ID: 35500 The vulnerability can also be triggered via the VLC web interface disabled by default:...

VideoLAN VLC Media Player 0.9.9 Buffer Overflow

!/usr/bin/ruby VideoLAN VLC Media Player 0.9.9 smb:// URI Stack-based Buffer Overflow Proof-of-Concept Bugtraq ID: 35500 The vulnerability can also be triggered via the VLC web interface disabled by default: http://vulnerableip:8080/requests/status.xml?command=inplay&input=smb://............ Patc...

VideoLAN VLC Media Player 0.9.9 smb:// URI Stack BOF PoC

Exploit for unknown platform in category dos / poc ======================================================== VideoLAN VLC Media Player 0.9.9 smb:// URI Stack BOF PoC ======================================================== !/usr/bin/ruby VideoLAN VLC Media Player 0.9.9 smb:// URI Stack-based Buffe...

VideoLAN VLC Media Player 0.9.9 - smb: URI Stack Buffer Overflow (PoC)

VideoLAN VLC Media Player 0.9.9 - smb: URI Stack Buffer Overflow PoC !/usr/bin/ruby VideoLAN VLC Media Player 0.9.9 smb:// URI Stack-based Buffer Overflow Proof-of-Concept Bugtraq ID: 35500 The vulnerability can also be triggered via the VLC web interface disabled by default:...

VideoLAN Client (VLC) Win32 smb:// URI Buffer Overflow

This module exploits a stack-based buffer overflow in the Win32AddConnection function of the VideoLAN VLC media player. Versions 0.9.9 through 1.0.1 are reportedly affected. This vulnerability is only present in Win32 builds of VLC. This payload was found to work with the windows/exec and...

VLC Media Player Detection (Linux/Unix SSH Login)

Detects the installed version of VLC Media Player version on Linux. This script logs in via shh, extracts the version from the binary file. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

DEBIAN-CVE-2008-5276

Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote attackers to execute arbitrary code via a malformed RealMedia .rm file that triggers a heap-based buffer overflow...

Integer overflow

Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote attackers to execute arbitrary code via a malformed RealMedia .rm file that triggers a heap-based buffer overflow...

CVE-2008-5276

The CVE-2008-5276 issue is a RealMedia integer overflow in VLC’s ReadRealIndex function (real.c) within the Real demuxer. A malformed RealMedia (.rm) file can trigger a heap-based buffer overflow, enabling remote code execution. Affected VLC releases range from 0.9.0 to 0.9.7. Exploitation detail...

CVE-2008-5276: Undefined Security Weakness

Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote attackers to execute arbitrary code via a malformed RealMedia .rm file that triggers a heap-based buffer overflow...