110 matches found
openSUSE Security Update : libxine-devel (libxine-devel-582)
Specially crafted 4x movie files could cause an integer overflow in xine-lib CVE-2009-0698. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libxine-devel-582. The text description of this plug...
Ubuntu: Security Advisory (USN-763-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD Ports: libxine
The remote host is missing an update to the system as announced in the referenced advisory. VID 51d1d428-42f0-11de-ad22-000e35248ad7 OpenVAS Vulnerability Test $ Description: Auto generated from VID 51d1d428-42f0-11de-ad22-000e35248ad7 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
SuSE Security Summary SUSE-SR:2009:009
The remote host is missing updates announced in advisory SUSE-SR:2009:009. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...
Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : xine-lib vulnerability (USN-746-1)
It was discovered that the 4xm demuxer in xine-lib did not correctly handle a large currenttrack value in a 4xm file, resulting in an integer overflow. If a user or automated system were tricked into opening a specially crafted 4xm movie file, an attacker could crash xine-lib or possibly execute...
Ubuntu 6.06 LTS / 8.04 LTS / 8.10 : xine-lib vulnerabilities (USN-763-1)
It was discovered that the QT demuxer in xine-lib did not correctly handle a large count value in an STTS atom, resulting in a heap-based buffer overflow. If a user or automated system were tricked into opening a specially crafted MOV file, an attacker could execute arbitrary code as the user...
openSUSE 10 Security Update : libxine-devel (libxine-devel-6052)
Specially crafted 4x movie files could cause an integer overflow in xine-lib CVE-2009-0698. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libxine-devel-6052. The text description of this...
USN-763-1: xine-lib vulnerabilities
It was discovered that the QT demuxer in xine-lib did not correctly handle a large count value in an STTS atom, resulting in a heap-based buffer overflow. If a user or automated system were tricked into opening a specially crafted MOV file, an attacker could execute arbitrary code as the user...
Ubuntu: Security Advisory (USN-746-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2009-0698
Technical details for CVE-2009-0698 are not publicly provided in the Connected Documents. Monitor for updates; currently, the supplied sources do not specify affected product/version/root cause/impact or fixes for this CVE.
CVE-2009-0698
Integer overflow in the 4xm demuxer demuxers/demux4xm.c in xine-lib 1.1.16.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a 4X movie file with a large currenttrack value, a similar issue to CVE-2009-0385...
CVE-2007-3676
IBM DB2 Universal Database UDB Administration Server DAS 8 before Fix Pack 16 and 9 before Fix Pack 4 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via modified pointer values in unspecified remote administration requests, which triggers memory...
CVE-2007-3676
CVE-2007-3676 concerns IBM DB2 UDB DAS prior to Fix Pack 16 (DAS 8.x) and Fix Pack 4 (DAS 9.x). The vulnerability allows a remote attacker to crash the DAS service or potentially execute arbitrary code by sending specially crafted remote administration requests that modify pointer values, trigger...
CVE-2008-0698
CVE-2008-0698 : IBM DB2 UDB DAS server has a buffer overflow in the DAS component prior to 8.2 Fixpak 16. This memory corruption likely stems from modified pointer values in remote administration requests and may enable denial of service or arbitrary code execution, per related Red Hat and NVD en...
CVE-2007-0698
CVE-2007-0698 affects ACGVannu 1.3 and earlier. The vulnerability consists of multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands via the id_mod parameter to templates/modif.html, and other unspecified vectors. The reported impact includes potential data acc...
CVE-2006-0698
CVE-2006-0698 affects Zen Cart prior to version 1.2.7. The vulnerability is described as unspecified vulnerabilities allowing remote attackers to cause unknown impact via unspecified vectors (other than SQL injection). The connected documents do not provide concrete exploit details, concrete root...
IMC SMTP EHLO Buffer Overrun
A security vulnerability results because of an unchecked buffer in the IMC code that generates the response to the EHLO protocol command. If the buffer were overrun with data it would result in either the failure of the IMC or could allow the attacker to run code in the security context of the IM...
