[SECURITY] [DSA 657-1] New xine-lib packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 657-1 [email protected] http://www.debian.org/security/ Martin Schulze January 25th, 2005 http://www.debian.org/security/faq -...

Debian DSA-657-1 : xine-lib - buffer overflow

A heap overflow has been discovered in the DVD subpicture decoder of xine-lib. An attacker could cause arbitrary code to be executed on the victims host by supplying a malicious MPEG. By tricking users to view a malicious network stream, this is remotely exploitable. %NASLMINLEVEL 70300 C Tenable...

DSA-657-1 xine-lib - buffer overflow

Bulletin has no description...

CVE-2004-1049

Integer overflow in the LoadImage API of the USER32 Lib for Microsoft Windows allows remote attackers to execute arbitrary code via a .bmp, .cur, .ico or .ani file with a large image size field, which leads to a buffer overflow, aka the "Cursor and Icon Format Handling Vulnerability."...

CVE-2004-1379

CVE-2004-1379 affects xine-lib prior to 0.9.8-2woody3 ( woody) and earlier, with a heap overflow in the DVD subpicture decoder that lets an attacker cause arbitrary code execution by processing a malicious MPEG header. The Debian advisory confirms remote, remote-executable impact via a crafted ne...

Mandrake Linux Security Advisory : xine-lib (MDKSA-2005:011)

iDefense discovered that the PNATAG handling code in pnmgetchunk does not check if the input size is larger than the buffer size CVE-2004-1187. As well, they discovered that in this same function, a negative value could be given to an unsigned variable that specifies the read length of input data...

CVE-2004-1300

Buffer overflow in the openaifffile function in demuxaiff.c for xine-lib libxine 1-rc7 allows remote attackers to execute arbitrary code via a crafted AIFF file...

CVE-2004-1300

Buffer overflow in the openaifffile function in demuxaiff.c for xine-lib libxine 1-rc7 allows remote attackers to execute arbitrary code via a crafted AIFF file...

CVE-2004-1476

Stack-based buffer overflow in the VideoCD VCD code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label...

CVE-2004-1476

Stack-based buffer overflow in the VideoCD VCD code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label...

CVE-2004-1455

Stack-based buffer overflow in Xine-lib-rc5 in xine-lib 1rc5-r2 and earlier allows remote attackers to execute arbitrary code via crafted playlists that result in a long vcd:// URL...

CVE-2004-1475

Multiple stack-based buffer overflows in xine-lib 1-rc2 through 1-rc5 allow attackers to execute arbitrary code via 1 long VideoCD vcd:// MRLs or 2 long subtitle lines...

xine-lib buffer overflows

buffer overflow in the PNM, VCD and DVD handling code...

XSA-2004-7: stack overflow in AIFF demultiplexer

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 xine security announcement ========================== Announcement-ID: XSA-2004-7 Summary: A stack buffer overflow vulnerability in the AIFF demultiplexer has been found by Ariel Berkman and was reported to the xine team by D. J. Bernstein. This can b...

CVE-2004-1300

CVE-2004-1300 affects xine-lib (libxine) 1-rc7, where a buffer overflow in demux_aiff.c:open_aiff_file allows remote attackers to execute arbitrary code via a crafted AIFF file. Multiple sources (NVD, SUSE, Gentoo GLSA, OpenVAS/Nessus references) describe the vulnerability as a buffer overflow in...

CVE-2004-1300

Buffer overflow in the openaifffile function in demuxaiff.c for xine-lib libxine 1-rc7 allows remote attackers to execute arbitrary code via a crafted AIFF file...

CVE-2004-1300

Buffer overflow in the openaifffile function in demuxaiff.c for xine-lib libxine 1-rc7 allows remote attackers to execute arbitrary code via a crafted AIFF file...

Xine-Lib < 1.0-rc8 Remote Client-Side Buffer Overflow

Binary data 2459.prm...

Mandrake Linux Security Advisory : xine-lib (MDKSA-2004:105)

A number of string overflows were discovered in the xine-lib program, some of which can be used for remote buffer overflow exploits that lead to the execution of arbitrary code with the permissions of the user running a xine-lib-based media application. xine-lib versions 1-rc2 through, and...

GLSA-200409-30 : xine-lib: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200409-30 xine-lib: Multiple vulnerabilities xine-lib contains two stack-based overflows and one heap-based overflow. In the code reading VCD disc labels, the ISO disc label is copied into an unprotected stack buffer of fixed size...