CVE-2005-2967

Format string vulnerability in inputcdda.c in xine-lib 1-beta through 1-beta 3, 1-rc, 1.0 through 1.0.2, and 1.1.1 allows remote servers to execute arbitrary code via format string specifiers in metadata in CDDB server responses when the victim plays a CD...

CVE-2005-2967

CVE-2005-2967 is a format-string vulnerability in xine-lib’s CDDB processing. The flaw exists in xine-lib 1-beta through 1-beta 3, 1-rc, 1.0 through 1.0.2, and 1.1.1, allowing a remote attacker to execute arbitrary code via specially crafted CDDB responses when a CD is played. The issue is tied t...

CVE-2005-2967

Format string vulnerability in inputcdda.c in xine-lib 1-beta through 1-beta 3, 1-rc, 1.0 through 1.0.2, and 1.1.1 allows remote servers to execute arbitrary code via format string specifiers in metadata in CDDB server responses when the victim plays a CD...

[SECURITY] [DSA 863-1] New xine-lib packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 863-1 [email protected] http://www.debian.org/security/ Martin Schulze October 12th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 863-1] New xine-lib packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 863-1 [email protected] http://www.debian.org/security/ Martin Schulze October 12th, 2005 http://www.debian.org/security/faq -...

DSA-863-1 xine-lib - format string vulnerability

Bulletin has no description...

Slackware 10.0 / 10.1 / 10.2 / 9.1 / current : xine-lib (SSA:2005-283-01)

New xine-lib packages are available for Slackware 9.1, 10.0, 10.1, 10.2, and -current to fix a security issue. A format string bug may allow the execution of arbitrary code as the user running a xine-lib linked application. The attacker must provide by uploading or running a server specially...

GLSA-200510-08 : xine-lib: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200510-08 xine-lib: Format string vulnerability Ulf Harnhammar discovered a format string bug in the routines handling CDDB server response contents. Impact : An attacker could submit malicious information about an audio CD to a...

xine-lib

New xine-lib packages are available for Slackware 9.1, 10.0, 10.1, 10.2, and -current to fix a security issue. A format string bug may allow the execution of arbitrary code as the user running a xine-lib linked application. The attacker must provide by uploading or running a server specially...

xine-lib <= 1.1 (media player library) Remote Format String Exploit

Exploit for linux platform in category remote exploits =================================================================== xine-lib = 1.1 media player library Remote Format String Exploit =================================================================== !/usr/bin/perl -- When playing an Audio C...

Xine-Lib 1.1 - 'Media Player Library' Remote Format String

!/usr/bin/perl -- When playing an Audio CD, using xine-lib based media application, the library contacts a CDDB server to retrieve metadata like the title and artist's name. During processing of this data, a response from the server, which is located in memory on the stack, is passed to the fprin...

xine-lib media player library format string bug

Format string bug on CDDB server reponse parsing...

xine-lib: Format string vulnerability

Background xine-lib is a multimedia library which can be utilized to create multimedia frontends. It includes functions to retrieve information about audio CD contents from public CDDB servers. Description Ulf Harnhammar discovered a format string bug in the routines handling CDDB server response...

libxine -- format string vulnerability

Gentoo Linux Security Advisory reports: Ulf Harnhammar discovered a format string bug in the routines handling CDDB server response contents. An attacker could submit malicious information about an audio CD to a public CDDB server or impersonate a public CDDB server. When the victim plays this CD...

perl security update

CentOS Errata and Security Advisory CESA-2005:674 Updated Perl packages that fix security issues and contain several bug fixes are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. Perl is a high-level...

Low: Red Hat Security Advisory: perl security update

Updated Perl packages that fix security issues and contain several bug fixes are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. Perl is a high-level programming language commonly used for system...

P2P Pro 1.0 - 'command' Denial of Service

/ P2P Pro Command DOS Exploit ------------------------------------ Infam0us Gr0up - Securiti Research Info: infamous.2hell.com Vendor URL: http://www.digital-revolution.org/P2PPro.html / include string.h include winsock2.h include stdio.h pragma commentlib, "ws232.lib" char doscore =...

Adobe Version Cue 1.0/1.0.1 (OSX) - '-lib' Local Privilege Escalation

/ Adobe Version Cue VCNativeOSX: local root exploit. dyld by: vade79/v9 [email protected] fakehalo/realhalo Adobe Version Cue's VCNative program allows un-privileged local users to load arbitrary libraries"bundles" while running setuid root. this is done via the "-lib" command-line option. note:...

CVE-2005-2636

SQL injection vulnerability in lib-view-direct.inc.php in phpAdsNew and phpPgAds before 2.0.6 allows remote attackers to execute arbitrary SQL commands via the clientid parameter...

CVE-2005-2636

The CVE-2005-2636 issue affects phpAdsNew/phpPgAds prior to version 2.0.6, where the libraries/lib-view-direct.inc.php clientid parameter enables SQL injection. This allows remote attackers to execute arbitrary SQL commands against the backend. The only concrete detail available is that the vulne...