CVE-2024-39148

The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...

EUVD-2024-55105

The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...

CVE-2024-39148

The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...

CVE-2024-39148

The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...

CVE-2024-39148

CVE-2024-39148 affects KerOS prior to 5.12. The issue is in the wmp-agent service, which does not properly validate the so‑called ‘magic URLs’, allowing an unauthenticated attacker to execute arbitrary OS commands as root if the service is reachable over the network. Documents from Red Hat, ENISA...

PT-2025-48467

Name of the Vulnerable Software and Affected Versions KerOS versions prior to 5.12 Description The wmp-agent service does not correctly validate ‘magic URLs’, potentially allowing a remote attacker without authentication to execute arbitrary operating system commands as root if the service is...

CVE-2024-39148

The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...

CVE-2024-39148

The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...

SUSE SLED15 / SLES15 Security Update : permissions (SUSE-SU-2020:2830-1)

This update for permissions fixes the following issues : whitelist WMP bsc1161335, bsc1176625 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible...

SUSE SLES15 Security Update : permissions (SUSE-SU-2020:2814-1)

This update for permissions fixes the following issues : whitelist WMP bsc1161335, bsc1176625 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible...

openSUSE Security Update : permissions (openSUSE-2020-1658)

This update for permissions fixes the following issues : - whitelist WMP bsc1161335, bsc1176625 This update was imported from the SUSE:SLE-15-SP1:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

OPENSUSE-SU-2020:1658-1 Security update for permissions

This update for permissions fixes the following issues: - whitelist WMP bsc1161335, bsc1176625 This update was imported from the SUSE:SLE-15-SP1:Update update project...

Security update for permissions (moderate)

openSUSE Security Update: Security update for permissions Announcement ID: openSUSE-SU-2020:1658-1 Rating: moderate References: 1161335 1176625 Affected Products: openSUSE Leap 15.1 An update that contains security fixes can now be installed. Description: This update for permissions fixes the...

SUSE-SU-2020:2830-1 Security update for permissions

This update for permissions fixes the following issues: - whitelist WMP bsc1161335, bsc1176625...

SUSE-SU-2020:2814-1 Security update for permissions

This update for permissions fixes the following issues: - whitelist WMP bsc1161335, bsc1176625...

Firefox 3.5.10 & 3.6.6 WMP Memory Corruption Using Popups

No description provided by source. Source: http://code.google.com/p/skylined/issues/detail?id=21 Exploit Title: Firefox 3.5.10 & 3.6.6 WMP Memory Corruption Using Popups Date: 2010-10-13 Author: berendjanwever Version: FF 3.5.10 & 3.6.6 with WMP 10 & 11 Tested on: Windows XP sp3 HTML HEAD SCRIPT...

Google Chrome < 19.0.1084.46 Multiple Vulnerabilities

Binary data 800898.prm...

Google Chrome < 19.0.1084.46 Multiple Vulnerabilities

Binary data 6487.pasl...

CVE-2012-0003

CVE-2012-0003 is a remote-code-execution issue in Windows Multimedia Library (winmm.dll) used by Windows Media Player. A specially crafted MIDI file can trigger the vulnerability, leading to arbitrary code execution with the user’s context. Affected products include Windows XP SP2/SP3, Windows Se...

Firefox 3.5.10 & 3.6.6 WMP Memory Corruption Using Popups

Exploit for windows platform in category dos / poc ========================================================= Firefox 3.5.10 & 3.6.6 WMP Memory Corruption Using Popups ========================================================= Source: http://code.google.com/p/skylined/issues/detail?id=21 Exploit...