fl0 fl0w vulnerabilities and exploits

(subscribe to this query)

Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote malicious users to execute arbitrary code via a M3U playlist file that contains a long file name. NOTE: it was later reported that 1.20 and 1.30 are also affected.

Itinysoft Studio Total Video Player

2 EDB exploits

Stack-based buffer overflow in Elecard AVC HD Player allows remote malicious users to execute arbitrary code via a long MP3 filename in a playlist (.xpl) file.

Elecard Elecard Avc Hd Player

1 EDB exploit

Buffer overflow in Hero Super Player 3000 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a long filename in a .M3U file. NOTE: this might be related to CVE-2008-4504.

Heroshare Hero Super Player 3000 -

1 EDB exploit

Windows Explorer in Microsoft Windows XP SP3 allows user-assisted malicious users to cause a denial of service (application crash) via a crafted .ZIP file.

Microsoft Windows Xp Sp3

1 EDB exploit

Stack-based buffer overflow in ape_plugin.plg in Xilisoft Video Converter 3.1.53.0704n and 5.1.23.0402 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a .cue file.

Xilisoft Xilisoft Video Converter 3.1.53 Xilisoft Xilisoft Video Converter 5.1.23

1 EDB exploit

Stack-based buffer overflow in the UpdateFrameTitleForDocument method in the CFrameWnd class in mfc42.dll in the Microsoft Foundation Class (MFC) Library in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2...

Microsoft Windows Vista -Microsoft Windows Server 2008 -Microsoft Windows Xp Sp3 Microsoft Windows 7 Microsoft Windows Xp -Microsoft Windows Server 2003 -

1 EDB exploit

Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote malicious users to execute arbitrary code via an ogg file with a crafted Advanced SubStation Alpha Subtitle (.ass) file, probably involving the Dialogue field.

Videolan Vlc Media Player 0.8.6

1 EDB exploit

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-3227. Reason: This candidate is a duplicate of CVE-2010-3227. Notes: All CVE users should reference CVE-2010-3227 instead of this candidate. All references and descriptions in this candidate have been removed...

1 EDB exploit

Soft SaschArt SasCAM Webcam Server 2.6.5, 2.7, and previous versions allows remote malicious users to cause a denial of service (crash) via a large number of requests with a long line, as demonstrated using a long GET request.

Saschart Sascam Webcam Server 2.6.5 Saschart Sascam Webcam Server

1 EDB exploit

Stack-based buffer overflow in Numark CUE 5.0 rev2 allows user-assisted malicious users to cause a denial of service (application crash) or execute arbitrary code via an M3U playlist file that contains a long absolute pathname.

1 EDB exploit

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook