[slackware-security] xine-lib

New xine-lib packages are available for Slackware 9.1, 10.0, 10.1, 10.2, and 11.0 to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2006-2200 Here are the details from the Slackware 11.0...

PHPMysql Site Builder 0.0.2 - htm2PHP.php File Disclosure

PHPMysql Site Builder 0.0.2 - htm2PHP.php File Disclosure PHPBuilder v0.0.2 Remote File Disclosure Vulnerability Download: http://sourceforge.net/project/downloading.php?groupname=phpbuilder&filename=phpbuilder-0.0.2.tgz&usemirror=switch Found By: the master exploit:...

CVE-2006-6634

Multiple PHP remote file inclusion vulnerabilities in the ExtCalThai comextcalendar 0.9.1 and earlier component for Mambo allow remote attackers to execute arbitrary PHP code via a URL in 1 the CONFIGEXTLANGUAGESDIR parameter to adminevents.php, 2 the mosConfigabsolutepath parameter to...

GLSA-200612-02 : xine-lib: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200612-02 xine-lib: Buffer overflow A possible buffer overflow has been reported in the Real Media input plugin. Impact : An attacker could exploit this vulnerability by enticing a user into loading a specially crafted stream with...

CVE-2006-6415

CVE-2006-6415 describes a remote file inclusion risk in phpAdsNew 2.0.4-pr2, involving admin/lib-maintenance.inc.php and the phpAds_path parameter. Exploitation would allow remote PHP code execution via a URL. The issue is noted as disputed by CVE, since phpAds_path is used as a constant. Connect...

Xine-Lib RuleMatches远程缓冲区溢出漏洞

xine是一款免费的媒体播放器，支持多种格式。 xine的Real Media输入插件的asmrpmatch函数中存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 在以下代码段中，rulematches是仅能容纳16个int的静态缓冲区，但asmrpmatch没有对参数执行边界检查： 8--------------------------------------------8 src/input/libreal/real.c:468 for i=0; idesc-streamcount; i++ int j=0; int n; char b64; int...

SQLiteWebAdmin 0.1 (tpl.inc.php) Remote Include Vulnerability

No description provided by source. SQLiteWebAdmin http://sourceforge.net/projects/sqlitewebadmin SQLiteWebAdmin is a simple PHP program for administrating a SQL DataBase. It suffers of a Remote File Inclusion Vulnerability. The bug is in the "tpl.inc.php" program in the "lib" directory, and is...

kronolith -- arbitrary local file inclusion vulnerability

iDefense Labs reports: Remote exploitation of a design error in Horde's Kronolith could allow an authenticated web mail user to execute arbitrary PHP code under the security context of the running web server. The vulnerability specifically exists due to a design error in the way it includes certa...

Debian DSA-1215-1 : xine-lib - several vulnerabilities

Several remote vulnerabilities have been discovered in the Xine multimedia library, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-4799 The XFocus Security Team discovered that insufficient...

[SECURITY] [DSA 1215-1] New xine-lib packages fix execution of arbitrary code

-------------------------------------------------------------------------- Debian Security Advisory DSA 1215-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 20th, 2006 http://www.debian.org/security/faq -...

DSA-1215-1 xine-lib

Bulletin has no description...

DSA-1215 xine-lib

Bulletin has no description...

PhpMyChat <= 0.14.5 Source Code Disclosure Vulnerability

Title : PhpMyChat = 0.14.5 Source Code Disclosure Vulnerability Author : ajann Dork : phpMyChat 0.14.5 , phpMyChat Vuln; File localization/languages.lib.php3 /File Code,1 languages.lib.php3 Error: .. .... require"./$ChatPathconfig/config.lib.php3";...

MS Windows (keybd_event) Local Privilege Elevation Exploit

No description provided by source. / Microsoft Windows keybdevent validation vulnerability. Local privilege elevation Credits: Andres Tarasco aT4r @ haxorcitos.com Iaki Lopez ilo @ reversing.org Platforms afected/tested: - Windows 2000 - Windows XP - Windows 2003 Original Advisory:...

Debian DSA-1105-1 : xine-lib - buffer overflow

Federico L. Bossi Bonin discovered a buffer overflow in the HTTP Plugin in xine-lib, the xine video/media player library, that could allow a remote attacker to cause a denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...

Debian DSA-1005-1 : xine-lib - buffer overflow

Simon Kilvington discovered that specially crafted PNG images can trigger a heap overflow in libavcodec, the multimedia library of ffmpeg, which may lead to the execution of arbitrary code. xine-lib includes a local copy of libavcodec. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

CVE-2006-5262

The CVE-2006-5262 entry describes a CRLF injection in Hastymail 1.5 and earlier (before 20061008) affecting lib/session.php. Remote authenticated users can craft a mailbox name containing CRLF to send arbitrary IMAP commands; the attack may cross privilege boundaries if the IMAP server is configu...

PT-2006-5826 · Phpmychat · Phpmychat

Name of the Vulnerable Software and Affected Versions: phpMyChat version 0.1 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the ChatPath parameter in the connected users.lib.php3 file. Recommendations: For phpMyChat version 0.1, consider restricting acce...

dokuwiki -- multiple vulnerabilities

Secunia reports: Some vulnerabilities have been reported in DokuWiki, which can be exploited by malicious people to cause a DoS Denial of Service or potentially compromise a vulnerable system. Input passed to the "w" and "h" parameters in lib/exec/fetch.php is not properly sanitised before being...

GLSA-200609-08 : xine-lib: Buffer overflows

The remote host is affected by the vulnerability described in GLSA-200609-08 xine-lib: Buffer overflows xine-lib contains buffer overflows in the processing of AVI. Additionally, xine-lib is vulnerable to a buffer overflow in the HTTP plugin xinepluginphttp.so via a long reply from an HTTP server...