GLSA-200504-27 : xine-lib: Two heap overflow vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200504-27 xine-lib: Two heap overflow vulnerabilities Heap overflows have been found in the code handling RealMedia RTSP and Microsoft Media Services streams over TCP MMST. Impact : By setting up a malicious server and enticing a...

xine-lib: Two heap overflow vulnerabilities

Background xine-lib is a multimedia library which can be utilized to create multimedia frontends. Description Heap overflows have been found in the code handling RealMedia RTSP and Microsoft Media Services streams over TCP MMST. Impact By setting up a malicious server and enticing a user to use i...

CVE-2005-1195

CVE-2005-1195 affects xine-lib before 1.0 and products using it (e.g., MPlayer 1.0pre6 and earlier). Multiple heap-based buffer overflows in MMS over TCP (MMST) and RealMedia RTSP stream handling allow remote attackers to execute arbitrary code. Impact: code execution with the user’s privileges; ...

CVE-2005-1195

Multiple heap-based buffer overflows in the code used to handle 1 MMS over TCP MMST streams or 2 RealMedia RTSP streams in xine-lib before 1.0, and other products that use xine-lib such as MPlayer 1.0pre6 and earlier, allow remote malicious servers to execute arbitrary code...

CVE-2005-1195

Multiple heap-based buffer overflows in the code used to handle 1 MMS over TCP MMST streams or 2 RealMedia RTSP streams in xine-lib before 1.0, and other products that use xine-lib such as MPlayer 1.0pre6 and earlier, allow remote malicious servers to execute arbitrary code...

RHEL 4 : alsa-lib (RHSA-2005:033)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:033 advisory. The alsa-lib package provides a library of functions for communication with kernel sound drivers. A flaw in the alsa mixer code was discovered that...

Important: Red Hat Security Advisory: alsa-lib security update

An updated alsa-lib package that fixes a flaw that disabled stack execution protection is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The alsa-lib package provides a library of functions for...

CVE-2005-0087

The alsa-lib package in Red Hat Linux 4 disables stack protection for the libasound.so library, which makes it easier for attackers to execute arbitrary code if there are other vulnerabilities in the library...

CVE-2005-0087

The CVE affects Red Hat Linux 4: the alsa-lib package disables stack-protection in libasound.so, allowing potential arbitrary-code execution when combined with other vulnerabilities. This is documented as CAN-2005-0087 and RHSA-2005:033. A patched alsa-lib update addressing stack-execution protec...

CVE-2005-0087

The alsa-lib package in Red Hat Linux 4 disables stack protection for the libasound.so library, which makes it easier for attackers to execute arbitrary code if there are other vulnerabilities in the library...

GLSA-200501-07 : xine-lib: Multiple overflows

The remote host is affected by the vulnerability described in GLSA-200501-07 xine-lib: Multiple overflows Ariel Berkman discovered that xine-lib reads specific input data into an array without checking the input size in demuxaiff.c, making it vulnerable to a buffer overflow CAN-2004-1300 . iDefen...

CVE-2004-1476

Stack-based buffer overflow in the VideoCD VCD code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label...

CVE-2004-1476

CVE-2004-1476 affects xine-lib (versions 1-rc2 through 1-rc5, derived from libcdio). The vulnerability is a stack-based buffer overflow in the VideoCD (VCD) handling, exploitable via a VideoCD with an unterminated disk label, which can lead to arbitrary code execution. OpenVAS/Gentoo advisories i...

CVE-2004-1475

CVE-2004-1475 affects xine-lib 1-rc2 through 1-rc5. The vulnerability comprises multiple buffer overflows: two stack-based overflows in the VCD disc label handling (vcd:// MRLs) and in subtitle parsing, plus a heap-based overflow in the DVD sub-picture decoder. These flaws can allow remote attack...

CVE-2004-1475

Multiple stack-based buffer overflows in xine-lib 1-rc2 through 1-rc5 allow attackers to execute arbitrary code via 1 long VideoCD vcd:// MRLs or 2 long subtitle lines...

CVE-2004-1455

CVE-2004-1455 describes a stack-based buffer overflow in xine-lib-rc5 (xine-lib 1_rc5-r2 and earlier) that allows remote attackers to execute arbitrary code via crafted playlists producing a long vcd:// URL. This is the core vulnerability reported by multiple sources (NVD, CVE listing, Gentoo GLS...

CVE-2004-1475

Multiple stack-based buffer overflows in xine-lib 1-rc2 through 1-rc5 allow attackers to execute arbitrary code via 1 long VideoCD vcd:// MRLs or 2 long subtitle lines...

CVE-2004-1455

Stack-based buffer overflow in Xine-lib-rc5 in xine-lib 1rc5-r2 and earlier allows remote attackers to execute arbitrary code via crafted playlists that result in a long vcd:// URL...

CVE-2004-1455

Stack-based buffer overflow in Xine-lib-rc5 in xine-lib 1rc5-r2 and earlier allows remote attackers to execute arbitrary code via crafted playlists that result in a long vcd:// URL...

CVE-2004-1476

Stack-based buffer overflow in the VideoCD VCD code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label...