EUVD-2010-1550

Malware in sbrugna...

(Pwn2Own) Oracle Java FLV Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of FLV...

Winamp 5.6存在多个安全漏洞

Bugtraq ID: 48457 Winamp是一款流行的媒体播放器。 Winamp存在多个安全漏洞，允许攻击者执行任意代码或使应用程序崩溃。 -当解析On2 TrueMotion VP6 codec编码的媒体文件时vp6.w5s存在错误，如果构建的FLV媒体文件中"version"字段超过8，可触发内存破坏。 -解析H263视频内容中"CustomWidth"和"CustomHeight"字段时存在错误，构建特制FLV文件可触发内存破坏。 -解压缩帧时nsvdecvp5.dll存在错误，构建特制的NSV文件可触发基于堆的缓冲区溢出。...

Winamp VP6 Content Parsing Buffer Overflow Vulnerability

Winamp is prone to heap-based buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-1523

Multiple heap-based buffer overflows in vp6.w5s aka the VP6 codec in Winamp before 5.59 Beta build 3033 might allow remote attackers to execute arbitrary code via a crafted VP6 1 video file or 2 video stream...

Heap overflow

Multiple heap-based buffer overflows in vp6.w5s aka the VP6 codec in Winamp before 5.59 Beta build 3033 might allow remote attackers to execute arbitrary code via a crafted VP6 1 video file or 2 video stream...

CVE-2010-1523

Multiple heap-based buffer overflows in vp6.w5s aka the VP6 codec in Winamp before 5.59 Beta build 3033 might allow remote attackers to execute arbitrary code via a crafted VP6 1 video file or 2 video stream...

CVE-2010-1523

Summary (CVE-2010-1523): Winamp’s VP6 codec vp6.w5s contains a heap-based buffer overflow in the VP6 content parsing when handling crafted VP6 video files/streams, potentially allowing remote code execution. Affected software: Winamp before 5.59 Beta build 3033. Underlying cause: heap-based overf...

Winamp VP6编码解码器视频内容解析堆溢出漏洞

BUGTRAQ ID: 44466 CVECAN ID: CVE-2010-1523 Winamp是一款流行的媒体播放器，支持多种文件格式。 Winamp的VP6编码解码器（vp6.w5s）在解析畸形VP6视频内容时存在堆溢出漏洞，用户受骗打开了恶意的媒体文件或流就可以触发这个溢出，导致执行任意代码。 Nullsoft Winamp 5.581 Nullsoft -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.winamp.com/...