jetlib.sec » Tags » song-structure

Feeds

133445 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

4 items tagged "song structure"

Related tags: mixersequencer [+], java [+], midi file [+], midi [+], java updates [+], vulnerability [+], object [+], exploits [+]

• February 16, 2012
• 19:27

  Java MixerSequencer Object GM_Song Structure Handling

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a flaw within the handling of MixerSequencer objects in Java 6u18 and before. Exploitation id done by supplying a specially crafted MIDI file within an RMF File. When the MixerSequencer objects is used to play the file, the GM_Song structure is populated with a function pointer provided by a SONG block in the RMF. A Midi block that contains a MIDI with a specially crafted controller event is used to trigger the vulnerability. When triggering the vulnerability "ebx" points to a fake event in the MIDI file which stores the shellcode. A "jmp ebx" from msvcr71.dll is used to make the exploit reliable over java updates.

  Tags:  java mixersequencer midi java-updates midi-file song-structure  

• 19:27

  Java MixerSequencer Object GM_Song Structure Handling

   » ‎ Packet Storm Security Recent Files
  This Metasploit module exploits a flaw within the handling of MixerSequencer objects in Java 6u18 and before. Exploitation id done by supplying a specially crafted MIDI file within an RMF File. When the MixerSequencer objects is used to play the file, the GM_Song structure is populated with a function pointer provided by a SONG block in the RMF. A Midi block that contains a MIDI with a specially crafted controller event is used to trigger the vulnerability. When triggering the vulnerability "ebx" points to a fake event in the MIDI file which stores the shellcode. A "jmp ebx" from msvcr71.dll is used to make the exploit reliable over java updates.

  Tags:  java mixersequencer midi java-updates midi-file song-structure  

• 19:27

  Java MixerSequencer Object GM_Song Structure Handling

   » ‎ Packet Storm Security Misc. Files
  This Metasploit module exploits a flaw within the handling of MixerSequencer objects in Java 6u18 and before. Exploitation id done by supplying a specially crafted MIDI file within an RMF File. When the MixerSequencer objects is used to play the file, the GM_Song structure is populated with a function pointer provided by a SONG block in the RMF. A Midi block that contains a MIDI with a specially crafted controller event is used to trigger the vulnerability. When triggering the vulnerability "ebx" points to a fake event in the MIDI file which stores the shellcode. A "jmp ebx" from msvcr71.dll is used to make the exploit reliable over java updates.

  Tags:  java mixersequencer midi java-updates midi-file song-structure  

• 14:00

  [remote exploits] - Java MixerSequencer Object GM_Song Structure Handling Vulnerability

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [remote exploits] - Java MixerSequencer Object GM_Song Structure Handling Vulnerability

  Tags:  object java mixersequencer song-structure exploits vulnerability