889 matches found
CVE-2006-6513
The CControl::Download function /dl URI in Winamp Web Interface Wawi 7.5.13 and earlier allows remote authenticated users to download arbitrary file types under the root via a trailing "." dot in a filename in the file parameter, related to erroneous behavior of the IsWinampFile function...
Winamp Web接口多个安全漏洞
Winamp Web接口（Wawi）是Winamp的一个开源插件，允许用户通过Web浏览器远程管理媒体播放器。 Wawi的实现后半辈子存在多个安全漏洞，具体如下： ----------------------------------- A FindBasicAuth缓冲区溢出 ----------------------------------- FindBasicAuth函数位于security.cpp，用于解析客户端请求中的Authorization...
[Full-disclosure] Multiple vulnerabilities in Winamp Web Interface 7.5.13
Luigi Auriemma Application: Winamp Web Interface http://www.flippet.org/wawi/ Versions: = 7.5.13 Platforms: Windows Winamp plugin Bugs: A buffer-overflow in FindBasicAuth B browsing directory traversal C buffer-overflow in the browse, download and load functions D file extension check bypassing i...
Winamp Web Interface multiplse security vulnerabilities
Buffer overflows, directory traversal and protection bypass...
winamp7513.txt
Luigi Auriemma Application: Winamp Web Interface http://www.flippet.org/wawi/ Versions: = 7.5.13 Platforms: Windows Winamp plugin Bugs: A buffer-overflow in FindBasicAuth B browsing directory traversal C buffer-overflow in the browse, download and load functions D file extension check bypassing i...
Winamp Web interface 7.5.13 - Multiple Vulnerabilities
Winamp Web interface 7.5.13 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/21539/info Winamp Web Interface is prone to multiple remote vulnerabilities. These issues include: - Buffer-overflow issues - A directory-traversal issue - An arbitrary file-download issue - A...
Update Protection against AOL Nullsoft Winamp Ultravox Heap Overflow Vulnerability
A heap-based buffer overflow vulnerability was detected in the multimedia player AOL Nullsoft Winamp. A remote attacker can exploit this vulnerability to execute arbitrary code on an affected system...
Nullsoft Winamp <= 5.3 (Ultravox-Max-Msg) Heap Overflow DoS PoC
No description provided by source. / Nullsoft Winamp 5.31 Ultravox "Ultravox-Max-Msg" Heap Overflow Dos POC by cocoruderfrankruderathotmail.com,2006/10/30 use like "winampunsv.exe ultravox-max-msgvalue",then the winampunsvsimple ultravox server will listen on tcp port 80,when winamp connect the...
Nullsoft Winamp <= 5.3 (Ultravox-Max-Msg) Heap Overflow DoS PoC
Exploit for unknown platform in category dos / poc =============================================================== Nullsoft Winamp include include include define SERVERPORT 80 unsigned char buff1header1= "HTTP/1.0 200 OK\x0D\x0A" "Server: Ultravox 3.0\x0D\x0A" "Content-Type: misc/ultravox\x0D\x0A...
NullSoft Winamp 5.3 - Ultravox-Max-Msg Heap Overflow Denial of Service (PoC)
NullSoft Winamp 5.3 - Ultravox-Max-Msg Heap Overflow Denial of Service PoC / Nullsoft Winamp include include include define SERVERPORT 80 unsigned char buff1header1= "HTTP/1.0 200 OK\x0D\x0A" "Server: Ultravox 3.0\x0D\x0A" "Content-Type: misc/ultravox\x0D\x0A" "Ultravox-SID: 13381\x0D\x0A"...
NullSoft Winamp 5.3 - Ultravox-Max-Msg Heap Overflow Denial of Service (PoC)
/ Nullsoft Winamp include include include define SERVERPORT 80 unsigned char buff1header1= "HTTP/1.0 200 OK\x0D\x0A" "Server: Ultravox 3.0\x0D\x0A" "Content-Type: misc/ultravox\x0D\x0A" "Ultravox-SID: 13381\x0D\x0A" "Ultravox-Avg-Bitrate: 16000\x0D\x0A" "Ultravox-Max-Bitrate: 24000\x0D\x0A"...
CVE-2006-5567
Multiple heap-based buffer overflows in AOL Nullsoft WinAmp before 5.31 allow user-assisted remote attackers to execute arbitrary code via a crafted 1 ultravox-max-msg header to the Ultravox protocol handler or 2 unspecified Lyrics3 tags...
CVE-2006-5567
CVE-2006-5567 affects AOL Nullsoft Winamp prior to version 5.31. The vulnerability consists of multiple heap-based buffer overflows in the Ultravox handling code: specifically in processing the ultravox-max-msg header and in Lyrics3 tag parsing. The flaws allow a remote attacker to execute arbitr...
CVE-2006-5567
Multiple heap-based buffer overflows in AOL Nullsoft WinAmp before 5.31 allow user-assisted remote attackers to execute arbitrary code via a crafted 1 ultravox-max-msg header to the Ultravox protocol handler or 2 unspecified Lyrics3 tags...
AOL Nullsoft Winamp Lyrics3 heap buffer overflow
Overview AOL Nullsoft Winamp contains a heap-based buffer overflow in the code that handles Lyrics3 tags. This vulnerability may allow a remote, unauthenticated attacker execute arbitrary code on a vulnerable system. Description Lyrics3 is a system for embedding the lyrics inside an MP3 song file...
NullSoft WinAmp Ultravox support multiple security vulnerabilities
Buffer overflows on parsing different tags and headers...
iDefense Security Advisory 10.25.06: AOL Nullsoft Winamp Ultravox 'ultravox-max-msg' Header Heap Overflow Vulnerability
AOL Nullsoft Winamp Ultravox 'ultravox-max-msg' Header Heap Overflow Vulnerability iDefense Security Advisory 10.25.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 25, 2006 I. BACKGROUND Ultravox is a streaming media technology developed by AOL for delivering and publishing streaming...
iDefense Security Advisory 10.25.06: AOL Nullsoft Winamp Ultravox Lyrics3 v2.00 tags Heap Overflow Vulnerability
AOL Nullsoft Winamp Ultravox Lyrics3 v2.00 tags Heap Overflow Vulnerability iDefense Security Advisory 10.25.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 25, 2006 I. BACKGROUND Lyrics3 is a system for embedding the lyrics inside an MP3 song file. The Winamp media player has suppor...
Nullsoft Winamp Ultravox多个远程堆溢出漏洞
Winamp是一款流行的媒体播放器，支持多种文件格式。 Winamp的Ultravox协议处理器在处理ultravox-max-msg头时存在堆溢出漏洞。恶意的服务器可能导致Winamp客户端分配很小的空间，然后填充大量的服务器数据来触发这个溢出，最终执行任意指令。 Winamp的Ultravox Lyrics3解析代码中也存在堆溢出漏洞。如果解析了某些Lyrics3标签，恶意的服务器可能导致Winamp客户端分配很小的空间，然后填充大量的服务器数据来触发这个溢出，最终执行任意指令。 Nullsoft Winamp 5.3 Nullsoft Winamp 5.24...
Winamp < 5.31 Multiple Buffer Overflows
The remote host is using Winamp, a popular media player for Windows. The version of Winamp installed on the remote Windows host reportedly contains two overflow flaws, one involving the 'ultravox-max-msg' header used in its support of the Ultravox protocol and the other in its Ultravox Lyrics3...