Packet Storm - Information Security News, Files, Tools, Exploits, Advisories and Whitepapers http://packetstormsecurity.org/ en-us Mon, 28 May 2012 11:58:27 GMT 144400 http://packetstormsecurity.org/ http://www.google-analytics.com/__utm.gif?utmwv=1.3&utmn=1087674613&utmcs=ISO-8859-1&utmsr=31337x31337&utmsc=32-bit&utmul=en-us&utmje=0&utmfl=-&utmcn=1&utmdt=Files%u2248%20Packet%20Storm&utmhn=packetstormsecurity.org&utmr=-&utmp=%2Fgroups%2Fshadowpenguin%2Fwindows-exploits%2Fex_midiplug.c%2F&utmac=UA-18885198-1&utmcc=__utma%3D32867617.1087674613.1338206307.1338206307.1338206307.1%3B%2B__utmz%3D32867617.1338206307.1.1.utmccn%3D(direct)%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none) http://packetstormsecurity.org/files/16406/ex_midiplug.c http://packetstormsecurity.org/files/16406/ex_midiplug.c http://packetstormsecurity.org/files/16406/ex_midiplug.c.html Fri, 05 Nov 1999 22:24:09 GMT Midi-Plugin program "YAMAHA MidiPlug 1.10b" for Windows IE4/5 contains the buffer overflow bug. If the long "TEXT" variable is specified in EMBED tag, the buffer overflow occurs. If attacker sets the exploit on the webpage, visitor's host will be cracked by the any instructions written in the "TEXT" variable.