3751 matches found
CVE-2005-1195
Multiple heap-based buffer overflows in the code used to handle 1 MMS over TCP MMST streams or 2 RealMedia RTSP streams in xine-lib before 1.0, and other products that use xine-lib such as MPlayer 1.0pre6 and earlier, allow remote malicious servers to execute arbitrary code...
RHEL 4 : alsa-lib (RHSA-2005:033)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:033 advisory. The alsa-lib package provides a library of functions for communication with kernel sound drivers. A flaw in the alsa mixer code was discovered that...
Important: Red Hat Security Advisory: alsa-lib security update
An updated alsa-lib package that fixes a flaw that disabled stack execution protection is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The alsa-lib package provides a library of functions for...
CVE-2005-0087
The alsa-lib package in Red Hat Linux 4 disables stack protection for the libasound.so library, which makes it easier for attackers to execute arbitrary code if there are other vulnerabilities in the library...
CVE-2005-0087
The CVE affects Red Hat Linux 4: the alsa-lib package disables stack-protection in libasound.so, allowing potential arbitrary-code execution when combined with other vulnerabilities. This is documented as CAN-2005-0087 and RHSA-2005:033. A patched alsa-lib update addressing stack-execution protec...
CVE-2005-0087
The alsa-lib package in Red Hat Linux 4 disables stack protection for the libasound.so library, which makes it easier for attackers to execute arbitrary code if there are other vulnerabilities in the library...
GLSA-200501-07 : xine-lib: Multiple overflows
The remote host is affected by the vulnerability described in GLSA-200501-07 xine-lib: Multiple overflows Ariel Berkman discovered that xine-lib reads specific input data into an array without checking the input size in demuxaiff.c, making it vulnerable to a buffer overflow CAN-2004-1300 . iDefen...
CVE-2004-1476
Stack-based buffer overflow in the VideoCD VCD code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label...
CVE-2004-1476
CVE-2004-1476 affects xine-lib (versions 1-rc2 through 1-rc5, derived from libcdio). The vulnerability is a stack-based buffer overflow in the VideoCD (VCD) handling, exploitable via a VideoCD with an unterminated disk label, which can lead to arbitrary code execution. OpenVAS/Gentoo advisories i...
CVE-2004-1475
CVE-2004-1475 affects xine-lib 1-rc2 through 1-rc5. The vulnerability comprises multiple buffer overflows: two stack-based overflows in the VCD disc label handling (vcd:// MRLs) and in subtitle parsing, plus a heap-based overflow in the DVD sub-picture decoder. These flaws can allow remote attack...
CVE-2004-1475
Multiple stack-based buffer overflows in xine-lib 1-rc2 through 1-rc5 allow attackers to execute arbitrary code via 1 long VideoCD vcd:// MRLs or 2 long subtitle lines...
CVE-2004-1455
CVE-2004-1455 describes a stack-based buffer overflow in xine-lib-rc5 (xine-lib 1_rc5-r2 and earlier) that allows remote attackers to execute arbitrary code via crafted playlists producing a long vcd:// URL. This is the core vulnerability reported by multiple sources (NVD, CVE listing, Gentoo GLS...
CVE-2004-1475
Multiple stack-based buffer overflows in xine-lib 1-rc2 through 1-rc5 allow attackers to execute arbitrary code via 1 long VideoCD vcd:// MRLs or 2 long subtitle lines...
CVE-2004-1455
Stack-based buffer overflow in Xine-lib-rc5 in xine-lib 1rc5-r2 and earlier allows remote attackers to execute arbitrary code via crafted playlists that result in a long vcd:// URL...
CVE-2004-1476
Stack-based buffer overflow in the VideoCD VCD code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label...
CVE-2004-1455
Stack-based buffer overflow in Xine-lib-rc5 in xine-lib 1rc5-r2 and earlier allows remote attackers to execute arbitrary code via crafted playlists that result in a long vcd:// URL...
[SECURITY] [DSA 657-1] New xine-lib packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 657-1 [email protected] http://www.debian.org/security/ Martin Schulze January 25th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 657-1] New xine-lib packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 657-1 [email protected] http://www.debian.org/security/ Martin Schulze January 25th, 2005 http://www.debian.org/security/faq -...
Debian DSA-657-1 : xine-lib - buffer overflow
A heap overflow has been discovered in the DVD subpicture decoder of xine-lib. An attacker could cause arbitrary code to be executed on the victims host by supplying a malicious MPEG. By tricking users to view a malicious network stream, this is remotely exploitable. %NASLMINLEVEL 70300 C Tenable...
