889 matches found
Winamp 5.13 - '.m3u' File Exception Handling Remote Denial of Service
source: https://www.securityfocus.com/bid/54190/info Winamp is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause an affected application to crash, denying service to legitimate users which may aid in other attacks. Winamp 5.13 is vulnerable; others may...
Winamp 5.13 - .m3u File Exception Handling Remote Denial of Service
Winamp 5.13 - .m3u File Exception Handling Remote Denial of Service source: https://www.securityfocus.com/bid/54190/info Winamp is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause an affected application to crash, denying service to legitimate users...
Nullsoft Winamp RIFF INFO Record Heap Buffer Overflow (CVE-2011-3834)
A remote code execution vulnerability has been reported in Nullsoft Winamp...
Nullsoft Winamp AVI Stream Count Integer Overflow (CVE-2011-3834)
A remote code execution vulnerability has been reported in Nullsoft Winamp...
Nullsoft Winamp Malformed MIDI File Buffer Overflow
A code execution vulnerability has been reported in Nullsoft Winamp...
Nullsoft Winamp Advanced Module Format File Buffer Overflow
A remote code execution vulnerability has been reported in Nullsoft Winamp. The vulnerability is caused due to a heap buffer overflow while handling specially crafted Advanced Module Format .amf files. A remote attacker may trigger this vulnerability by enticing a user to open a specially crafted...
Winamp 5.x 多个整数溢出漏洞
BUGTRAQ ID: 51015 CVE ID: CVE-2011-3834,CVE-2011-4857 Winamp是流行的通用音乐播放器。 Winamp在实现上存在多个整数溢出漏洞，攻击者可利用这些漏洞执行任意代码。 1）当使用流标头分配内存时，inavi.dll插件中的整数溢出错误可通过特制的AVI文件导致堆缓冲区溢出。 2）在使用RIFF INFO块尺寸值分配内存时，inavi.dll插件中的整数溢出错误可通过特制的AVI文件导致堆缓冲区溢出。 0 Nullsoft Winamp 5.x 厂商补丁： Nullsoft --------...
Winamp AVI And IT Files Parsing Buffer Overflow Vulnerabilities
Winamp is prone to buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Winamp AVI And IT Files Parsing Buffer Overflow Vulnerabilities
This host is installed with Winamp and is prone to buffer overflow vulnerabilities. OpenVAS Vulnerability Test $Id: secpodwinampavianditfilebofvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ Winamp AVI And IT Files Parsing Buffer Overflow Vulnerabilities Authors: Rachana Shetty Copyright: Copyright ...
Winamp < 5.623 Multiple Integer Overflows
The remote host is running Winamp, a media player for Windows. The version of Winamp installed on the remote host is earlier than 5.623 and thus is reportedly affected by the following integer overflow vulnerabilities : - An integer-overflow vulnerability exists in 'inavi.dll' when allocating...
CVE-2011-4857
Heap-based buffer overflow in the inmod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker IT file. NOTE: some of these details are obtained from third party information...
Heap overflow
Heap-based buffer overflow in the inmod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker IT file. NOTE: some of these details are obtained from third party information...
Integer overflow
Multiple integer overflows in the inavi.dll plugin in Winamp before 5.623 allow remote attackers to execute arbitrary code via an AVI file with a crafted value for 1 the number of streams or 2 the size of the RIFF INFO chunk, leading to a heap-based buffer overflow...
CVE-2011-3834
Multiple integer overflows in the inavi.dll plugin in Winamp before 5.623 allow remote attackers to execute arbitrary code via an AVI file with a crafted value for 1 the number of streams or 2 the size of the RIFF INFO chunk, leading to a heap-based buffer overflow...
CVE-2011-3834
Winamp
CVE-2011-4857
Heap-based buffer overflow in the inmod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker IT file. NOTE: some of these details are obtained from third party information...
CVE-2011-3834
Multiple integer overflows in the inavi.dll plugin in Winamp before 5.623 allow remote attackers to execute arbitrary code via an AVI file with a crafted value for 1 the number of streams or 2 the size of the RIFF INFO chunk, leading to a heap-based buffer overflow...
CVE-2011-4857
CVE-2011-4857 describes a heap-based buffer overflow in Winamp’s in_mod.dll plugin (pre-5.623) triggered by crafted Impulse Tracker (IT) file data, enabling remote code execution. The issue is tied to parsing/handling in IT data and relates to the in_mod.dll component used by Winamp 5.x. Public d...
Winamp 5.x 整数溢出漏洞
Bugtraq ID: 51015 CVE ID：CVE-2011-3834 Winamp是一款流行的媒体播放器。 Winamp存在多个安全漏洞，允许攻击者以应用程序上下文执行任意代码。 -当使用流头字段数值分配内存时inavi.dll插件存在整数溢出，通过特制的AVI文件可触发基于堆的缓冲区溢出。 -当使用RIFF INFO块大小值分配内存时inavi.dll插件存在整数溢出，通过特制的AVI文件可触发基于堆的缓冲区溢出。 -解析Impulse Tracker IT文件中歌曲消息数据时inmod.dll插件存在错误，可被触发基于堆的缓冲区溢出 NullSoft Winamp 5.x...
