< Back to JetLib.com

jetlib.sec » Tags » m-stack

« Expand/Collapse

6 items tagged "m stack"

Related tags: vlc [+], videolan [+], validation error [+], stack overflow [+], stack buffer [+], overflow [+], module [+], libmodplug [+], buffer overflow vulnerability [+], buffer overflow [+], based buffer overflow [+], user [+], reads [+]

August 07, 2011
20:34
Libmodplug ReadS3M Stack Overflow Vulnerability
» ‎ SecuriTeam

Libmodplug ReadS3M contains a stack based buffer overflow vulnerability due to insufficient validation of user supplied data.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: reads libmodplug overflow m-stack buffer-overflow-vulnerability stack-overflow based-buffer-overflow

May 08, 2011
21:28
VideoLAN VLC ModPlug ReadS3M Stack Buffer Overflow
» ‎ Packet Storm Security Exploits

This Metasploit module exploits an input validation error in libmod_plugin as included with VideoLAN VLC 1.1.8. All versions prior to version 1.1.9 are affected. By creating a malicious S3M file, a remote attacker could execute arbitrary code. Although other products that bundle libmodplug may be vulnerable, this module was only tested against VLC. NOTE: As of July 1st, 2010, VLC now calls SetProcessDEPPoly to permanently enable NX support on machines that support it. As such, this module is capable of bypassing DEP, but not ASLR.
Tags: videolan vlc module m-stack stack-buffer validation-error buffer-overflow

21:28
VideoLAN VLC ModPlug ReadS3M Stack Buffer Overflow
» ‎ Packet Storm Security Recent Files

This Metasploit module exploits an input validation error in libmod_plugin as included with VideoLAN VLC 1.1.8. All versions prior to version 1.1.9 are affected. By creating a malicious S3M file, a remote attacker could execute arbitrary code. Although other products that bundle libmodplug may be vulnerable, this module was only tested against VLC. NOTE: As of July 1st, 2010, VLC now calls SetProcessDEPPoly to permanently enable NX support on machines that support it. As such, this module is capable of bypassing DEP, but not ASLR.
Tags: videolan vlc module m-stack stack-buffer validation-error buffer-overflow

21:28
VideoLAN VLC ModPlug ReadS3M Stack Buffer Overflow
» ‎ Packet Storm Security Misc. Files

This Metasploit module exploits an input validation error in libmod_plugin as included with VideoLAN VLC 1.1.8. All versions prior to version 1.1.9 are affected. By creating a malicious S3M file, a remote attacker could execute arbitrary code. Although other products that bundle libmodplug may be vulnerable, this module was only tested against VLC. NOTE: As of July 1st, 2010, VLC now calls SetProcessDEPPoly to permanently enable NX support on machines that support it. As such, this module is capable of bypassing DEP, but not ASLR.
Tags: videolan vlc module m-stack stack-buffer validation-error buffer-overflow

April 07, 2011
8:05
Libmodplug 0.8.8.1 ReadS3M Stack Overflow
» ‎ Packet Storm Security Recent Files

Libmodplug library is prone to a stack based buffer overflow vulnerability due to insufficient validation of user supplied data. An attacker is able to execute arbitrary code in the context of the user when opening malicious S3M media files. Version 0.8.8.1 is affected.
Tags: user libmodplug overflow m-stack buffer-overflow-vulnerability stack-overflow based-buffer-overflow

8:05
Libmodplug 0.8.8.1 ReadS3M Stack Overflow
» ‎ Packet Storm Security Misc. Files

Libmodplug library is prone to a stack based buffer overflow vulnerability due to insufficient validation of user supplied data. An attacker is able to execute arbitrary code in the context of the user when opening malicious S3M media files. Version 0.8.8.1 is affected.
Tags: user libmodplug overflow m-stack buffer-overflow-vulnerability stack-overflow based-buffer-overflow