889 matches found
Winamp 5.572 - whatsnew.txt Local Buffer Overflow Exploit WinXP SP3 De
No description provided by source. Tested on: WinXP SP3 De !/usr/bin/perl Still learning, having some fun... Greetz to -Sid- Roadkill Jess Dawn Linki Special greetz do Debug, even i dont know you. Nice find man. Exploit has something around 70% chance of success. print \n\n; print Winamp 5.572...
SHOUTcast DNAS 2.2.1 - Stored XSS
No description provided by source. There is an XSS\HTML Injection in a song history in song history, allowing inject a JavaScript script or HTML code in site. PoC: 1. Open yours MP3 file setting, and open details overlap. 2. In the title field enter your HTML code 3. Start streaming your MP3 file...
Winamp 5.572 - Local BoF Exploit (EIP & SEH DEP Bypass)
No description provided by source. !/usr/bin/python Title: Winamp v5.572 local BOF exploit EIP & SEH DEP Bypass Author: Rocco Calvi aka TecR0c - http://tecninja.net/blog | http://twitter.com/TecR0c Found BY: Debug Date: June 18th, 2010 Platform: Windows XP sp3 En Greetz to: Corelan Security Team...
Winamp 5.572 - Local BoF Exploit (Win7 ASLR and DEP Bypass)
No description provided by source. !/usr/bin/python Exploit Title: Winamp v5.572 Local BoF Exploit Win7 ASLR and DEP Bypass Date: June 26, 2010 Author: Node Software Link: http://download.nullsoft.com/winamp/client/winamp5572fullemusic-7plusen-us.exe Tested on: Windows 7 Ultimate x64 ENG Badchars...
NullSoft Winamp 2.6 4 M3U Playlist Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1496/info The M3U Playlist file parser in NullSoft Winamp does not perform proper bounds checking with the extension EXTINF:. Therefore, entering a string consisting of over 280 characters in conjunction with this paramet...
Winamp 5.572 Exploit - SEH
No description provided by source. !/usr/bin/python Exploit Title: Winamp tecr0c@backtrack:/exploits/winamp$ nc -v 192.168.2.24 4444 192.168.2.24: inverse host lookup failed: Unknown server error : Connection timed out UNKNOWN 192.168.2.24 4444 ? open Microsoft Windows XP Version 5.1.2600 C...
NullSoft Winamp 2.81/2.91/3.0/3.1 MIDI Plugin IN_MIDI.DLL Track Data Size Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8567/info Winamp MIDI plugin, INMIDI.DLL has been reported prone to a buffer overflow issue when handling malicious MIDI files. The issue presents itself when a malicious value is passed as the Track Data Size of a...
Oddsock Song Requester 2.1 WinAmp Plugin Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5248/info A vulnerability has been reported for Oddsock Song Requester 2.1. The vulnerability occurs when an attacker makes a request to 'request.cgi' using a long value for the 'listpos' parameter. It is possible to caus...
Winamp <= 5.21 (Midi File Header Handling) Buffer Overflow PoC
/ Winamp 5.21 - Midi Buffer Overflow inmidi.dll PoC coded by: BassReFLeX Date: 19 Jun 2006 / include stdio.h include stdlib.h include string.h void usagechar file; char header = \x4D\x54\x68\x64\x00\x00 \x00\x06\x00\x00\x00\x01 \x00\x60\x4D\x54\x72\x6B \x00\x00; char badc0de =...
Winamp 5.61 - AVI DoS PoC
No description provided by source. done by BraniX [email protected] www.hackers.org.pl found: 2011.03.27 published: 2011.03.29 tested on: Windows XP SP3 Home Edition tested on: Windows XP SP3 Professional Edition App: Winamp 5.61 App Url: http://www.winamp.com inavi.dll MD5:...
Winamp <= 5.34 .MP4 File Code Execution Exploit
No description provided by source. /\ Winamp = 5.34 .MP4 File Code Execution Winamp MP4's plugin fails to handle exceptional conditions, which can lead to code execution. However exploitation is hard, firstly because of the return address. This code exploits a call eax, and it might be complicate...
Winamp <= 5.04 Skin File (.wsz) Remote Code Execution Exploit
No description provided by source. This 0day exploit is known to be circulating in the wild There is no patch for this vulnerability - Do not use Winamp ! http://www.milw0rm.com/sploits/skinhead.rar 171 Ko index.html ----------- html head /head frameset rows=,1 framespacing=0 border=0...
Nullsoft Winamp 5.0.x Variant IN_CDDA.dll Remote Buffer Overflow Vulnerability
No description provided by source...
Nullsoft Winamp 2.x AIP Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2680/info Winamp is a popular media player supporting MP3 and other filetypes. Versions of Winamp are vulnerable to a buffer overflow condition triggered during processing of Audiosoft parameter files .AIP. A user may...
Winamp <= 5.541 (mp3/aiff) Multiple Denial of Service Exploits
No description provided by source. Winamp = 5.541 multiples Denial of Services MP3/AIFF Winamp MP3 file parsing DoS == !/usr/bin/perl use strict; my $mp3 = \x49\x44\x33\x00\x00\x00\x00\x00\x09\x07\x54\x49\x54\x32\x00\x00\x00\x08\x00\x00\x00...
Winamp <= 5.12 - (.pls) Remote Buffer Overflow Exploit (0Day)
No description provided by source. / Winamp 5.12 Remote Buffer Overflow Universal Exploit Zero-Day Bug discovered & exploit coded by ATmaCA Web: http://www.spyinstructors.com && http://www.atmacasoft.com E-Mail: [email protected] Credit to Kozan / / Tested with : Winamp 5.12 on Win XP Pro Sp2 / ...
Winamp <= 5.541 Skin Universal Buffer Overflow Exploit
No description provided by source. !/usr/bin/perl WinAmp = 5.541 Skin Universal Buffer Overflow Exploit Discovered and Exploited by SkD [email protected] ----------------------------------------------------- WinAmp = http://www.winamp.com Who doesn't use WinAmp? This was an 0day for sometime but...
winamp web interface 7.5.13 Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/21539/info Winamp Web Interface is prone to multiple remote vulnerabilities. These issues include: - Buffer-overflow issues - A directory-traversal issue - An arbitrary file-download issue - A denial-of-service issue - An...
Winamp stack overflow analysis and use-vulnerability and early warning-the black bar safety net
Winamp is a relatively old player, here is mainly through winamp a poc analysis, to construct a exp. 主 程序 见 附件 winamp.exe poc see Annex poc. m3u. A Poc analysis View the first poc below. Found in addition to the front 1 0 more bytes of the m3u File format to specify the contents, the other parts...
SHOUTcast DNAS 2.2.1 - Stored XSS Vulnerability
Exploit for php platform in category web applications Exploit Title: SHOUTcast DNAS v2.2.1 win32 XSS\HTML Injection in Song history other version may be also affected Date: 2014-06-11 Exploit Author: robercik101 Vendor Homepage: http://www.shoutcast.com/ ?t=373139 Software Link:...