889 matches found
libFLAC / WinAMP multiple security vulnerabilities
14 different vulnerabilities exist on FLAC media format files parsing...
CVE-2002-2412
CVE-2002-2412 affects Winamp 2.80, where authentication credentials are stored in plaintext in the winamp.ini file (in the HTTP-AUTH and winamp sections). This plaintext storage enables local users to access other accounts on the same system. Documented sources from multiple feeds (NVD/Red Hat/CV...
CVE-2002-2412
Winamp 2.80 stores authentication credentials in plaintext in the 1 HTTP-AUTH and 2 winamp sections in winamp.ini, which allows local users to gain access to other accounts...
CVE-2002-2392
Affected product: Winamp 2.65 through 3.0. Vulnerable component: skin files (wsz and wal) stored in a predictable location. Root cause: a URL reference to these skin files can cause embedded code to be executed. Impact: remote attackers could execute arbitrary code. Exploitation details: CVE desc...
CVE-2002-2392
Winamp 2.65 through 3.0 stores skin files in a predictable file location, which allows remote attackers to execute arbitrary code via a URL reference to 1 wsz and 2 wal files that contain embedded code...
iDefense Security Advisory 10.11.07: Multiple Vendor FLAC Library Multiple Integer Overflow Vulnerabilities
Multiple Vendor FLAC Library Multiple Integer Overflow Vulnerabilities iDefense Security Advisory 10.11.07 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 11, 2007 I. BACKGROUND Free Lossless Audio Codec FLAC is a popular file format for audio data compression. AOL Corp.'s Winamp media...
libFlac / WinAMP multiple integer overflows
Multiple integer overflows on FLAC sound format parsing...
Integer overflow
Multiple integer overflows in Free Lossless Audio Codec FLAC libFLAC before 1.2.1, as used in Winamp before 5.5 and other products, allow user-assisted remote attackers to execute arbitrary code via a malformed FLAC file that triggers improper memory allocation, resulting in a heap-based buffer...
CVE-2007-4619
Multiple integer overflows in Free Lossless Audio Codec FLAC libFLAC before 1.2.1, as used in Winamp before 5.5 and other products, allow user-assisted remote attackers to execute arbitrary code via a malformed FLAC file that triggers improper memory allocation, resulting in a heap-based buffer...
CVE-2007-4619
CVE-2007-4619 describes multiple heap/stack-based overflows in FLAC libFLAC before 1.2.1 that could allow remote code execution via malformed FLAC files. Public advisories confirm upgrades to FLAC 1.2.1 fix the issue (e.g., Debian DSA-1469-1, CentOS/RHEL advisories, Fedora updates). Affected prod...
Winamp < 5.5 libFLAC Integer Overflow
Binary data 4243.prm...
Winamp < 5.5 FLAC Plug-in Multiple Buffer Overflows
The remote host is using Winamp, a popular media player for Windows. The version of Winamp installed on the remote Windows host contains a plug-in to handle playing FLAC files that contains several integer buffer overflow vulnerabilities. If an attacker can trick a user on the affected host into...
WinAMP buffer overflow
Buffer overflow on MP4 files parsing...
Winamp < 5.35 MP4 File Handling Buffer Overflow
The remote host is using Winamp, a popular media player for Windows. The version of Winamp installed on the remote Windows host reportedly contains a flaw involving its handling of 'MP4' files. If an attacker can trick a user on the affected host into opening a specially crafted MP4 file, this...
Code injection
The mIRC Control Plug-in for Winamp allows user-assisted remote attackers to execute arbitrary code via the '|' pipe shell metacharacter in the name of the song in a .mp3 file...
CVE-2007-4403
The mIRC Control Plug-in for Winamp allows user-assisted remote attackers to execute arbitrary code via the '|' pipe shell metacharacter in the name of the song in a .mp3 file...
CVE-2007-4403
The mIRC Control Plug-in for Winamp allows user-assisted remote attackers to execute arbitrary code via the '|' pipe shell metacharacter in the name of the song in a .mp3 file...
CVE-2007-4403
The CVE-2007-4403 affects the mIRC Control Plug-in for Winamp. The vulnerability occurs when the name of a song in an MP3 file includes the pipe character (|) shell metacharacter, which can be passed to the shell to trigger user‑assisted remote code execution. The provided documents describe the ...