CVE-2008-5233

CVE-2008-5233 affects xine-lib 1.1.12 and earlier; the vulnerability stems from missing malloc failure checks in demux_mng.c (mymng_process_header), demux_mod.c (open_mod_file), and demux_real.c (frame_buffer) which can allow a remote attacker to crash the player or possibly execute arbitrary cod...

CVE-2008-5236

CVE-2008-5236 affects xine-lib 1.1.12 and earlier 1.1.15, with multiple heap-based buffer overflows allowing remote code execution. Affected vectors include: (1) crafted EBML element length processed by parse_block_group in demux_matroska.c; (2) a combination of sps, w, and h values in demux_real...

CVE-2008-5244

Unspecified vulnerability in xine-lib before 1.1.15 has unknown impact and attack vectors related to libfaad. NOTE: due to the lack of details, it is not clear whether this is an issue in xine-lib or in libfaad...

CVE-2008-5233

xine-lib 1.1.12, and other versions before 1.1.15, does not check for failure of malloc in circumstances including 1 the mymngprocessheader function in demuxmng.c, 2 the openmodfile function in demuxmod.c, and 3 framebuffer allocation in the realparseaudiospecificdata function in demuxreal.c, whi...

CVE-2008-4829

Multiple buffer overflows in lib/http.c in Streamripper 1.63.5 allow remote attackers to execute arbitrary code via 1 a long "Zwitterion v" HTTP header, related to the httpparsescheader function; 2 a crafted pls playlist with a long entry, related to the httpgetpls function; or 3 a crafted m3u...

Pie Web M{a,e}sher 0.5.3 Multiple Remote File Inclusion Vulnerability

No description provided by source. =========================================================================================== o Pie Web Ma,esher 0.5.3 Multiple Remote File Inclusion Vulnerability Software : Pie Web Ma,esher version 0.5.3 Vendor : http://pie.ekkaia.org/ Download :...

CVE-2008-5244

Unspecified vulnerability in xine-lib before 1.1.15 has unknown impact and attack vectors related to libfaad. NOTE: due to the lack of details, it is not clear whether this is an issue in xine-lib or in libfaad...

CVE-2008-5242

demuxqt.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, does not validate the count field before calling calloc for STSDATOM atom allocation, which allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted media file...

Streamripper lib/http.c文件多个缓冲区溢出漏洞

BUGTRAQ ID: 32356 CVECAN ID: CVE-2008-4829 StreamRipper能够将网上的MP3流媒体保存到硬盘中，特别适合录制网络MP3广播。 Streamripper的lib/http.c文件中的httpparsescheader函数在解析以Zwitterion v开始的超长HTTP头时、httpgetpls函数在解析包含有超长项的特制pls播放列表时、httpgetm3u函数在解析包含有超长File项的特制m3u播放列表时存在缓冲区溢出漏洞。如果用户受骗连接到了恶意的服务器并加载了恶意的媒体文件的话，就可以触发这些溢出，导致执行任意指令。...

Solaris 10 (x86) : 138877-01

SunOS 5.10x86: usr/lib/inet/in.dhcpd patc. Date this patch was last updated by Sun : Nov/06/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated check has been entirely replaced by solaris10x86148310.nasl. Disabled on 2015/05/22. C Tenable Network Security, Inc. T...

Solaris 10 (sparc) : 138876-01

SunOS 5.10: usr/lib/inet/in.dhcpd patch. Date this patch was last updated by Sun : Nov/06/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated check has been entirely replaced by solaris10148309.nasl. Disabled on 2015/05/22. C Tenable Network Security, Inc. The...

Code injection

The loadModule function in lib/WebGUI/Asset.pm in WebGUI before 7.5.30 stable allows remote attackers to execute arbitrary code by uploading a Perl module and accessing it via a crafted URL...

CVE-2008-4325

CVE-2008-4325 affects ViewVC 1.0.5 (lib/viewvc.py) where the Content-Type header in the HTTP response is derived from the request’s content-type parameter, allowing a mismatch that could cause browsers to misinterpret content. The issue is contingent on attacker access to the viewed repository. P...

Gentoo Security Advisory GLSA 200604-16 (xine-lib)

The remote host is missing updates announced in advisory GLSA 200604-16. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200510-08 (xine-lib)

The remote host is missing updates announced in advisory GLSA 200510-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200408-18 (xine-lib)

The remote host is missing updates announced in advisory GLSA 200408-18. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200409-30 (xine-lib)

The remote host is missing updates announced in advisory GLSA 200409-30. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200612-02 (xine-lib)

The remote host is missing updates announced in advisory GLSA 200612-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200609-08 (xine-lib)

The remote host is missing updates announced in advisory GLSA 200609-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200404-20 (xine)

The remote host is missing updates announced in advisory GLSA 200404-20. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...