CVE-2010-1274

Cross-site scripting XSS vulnerability in Emweb Wt before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to "insertions of the URL" that occur during a redirection...

CVE-2010-1274

CVE-2010-1274 describes a cross-site scripting (XSS) vulnerability in Emweb Wt before 3.1.1. The issue arises from vectors related to the insertion of the URL during redirection, allowing remote attackers to inject arbitrary web script or HTML. Affected product: Emweb Wt (web toolkit) prior to 3....

Mandriva Security Advisory MDVSA-2009:319 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory MDVSA-2009:319. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandriva Linux Security Advisory : xine-lib (MDVSA-2009:319)

Vulnerabilities have been discovered and corrected in xine-lib : Failure on Ogg files manipulation can lead remote attackers to cause a denial of service by using crafted files CVE-2008-3231. Failure on manipulation of either MNG or Real or MOD files can lead remote attackers to cause a denial of...

Mandriva Security Advisory MDVSA-2009:298 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory MDVSA-2009:298. OpenVAS Vulnerability Test $Id: mdksa2009298.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:298 xine-lib Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...

Mandriva Security Advisory MDVSA-2009:299 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory MDVSA-2009:299. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandriva Linux Security Advisory : xine-lib (MDVSA-2009:299)

Vulnerabilities have been discovered and corrected in xine-lib : - Integer overflow in the qterror parsetrakatom function in demuxers/demuxqt.c in xine-lib 1.1.16.2 and earlier allows remote attackers to execute arbitrary code via a Quicktime movie file with a large count value in an STTS atom,...

openSUSE Security Update : libxine1 (libxine1-856)

This update of libxine1 fixes an integer overflow in the qterror parsetrakatom function in that leads to a heap-based overflow and allows remote attackers to execute arbitrary code via a malformed Quicktime movie file. CVE-2009-1274 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

openSUSE Security Update : xine-devel (xine-devel-861)

This update of xine-lib fixes an integer overflow in the qterror parsetrakatom function in that leads to a heap-based overflow and allows remote attackers to execute arbitrary code via a malformed Quicktime movie file. CVE-2009-1274 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Ubuntu: Security Advisory (USN-763-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: libxine

The remote host is missing an update to the system as announced in the referenced advisory. VID 48e14d86-42f1-11de-ad22-000e35248ad7 OpenVAS Vulnerability Test $ Description: Auto generated from VID 48e14d86-42f1-11de-ad22-000e35248ad7 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

FreeBSD Ports: libxine

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD : libxine -- multiple vulnerabilities (48e14d86-42f1-11de-ad22-000e35248ad7)

xine developers report : - Fix another possible int overflow in the 4XM demuxer. ref. TKADV2009-004, CVE-2009-0385 - Fix an integer overflow in the Quicktime demuxer. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from th...

Fedora 10 : xine-lib-1.1.16.3-1.fc10 (2009-3433)

Maintenance release. Fixes two security problems CVE-2009-0385, CVE-2009-1274 and a few miscellaneous bugs. See the upstream changelog for details: http://sourceforge.net/project/shownotes.php?groupid=9655&releaseid= 673233 Note that Tenable Network Security has extracted the preceding descriptio...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 : xine-lib vulnerabilities (USN-763-1)

It was discovered that the QT demuxer in xine-lib did not correctly handle a large count value in an STTS atom, resulting in a heap-based buffer overflow. If a user or automated system were tricked into opening a specially crafted MOV file, an attacker could execute arbitrary code as the user...

USN-763-1: xine-lib vulnerabilities

It was discovered that the QT demuxer in xine-lib did not correctly handle a large count value in an STTS atom, resulting in a heap-based buffer overflow. If a user or automated system were tricked into opening a specially crafted MOV file, an attacker could execute arbitrary code as the user...

Fedora Core 10 FEDORA-2009-3433 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory FEDORA-2009-3433. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora Core 10 FEDORA-2009-3433 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory FEDORA-2009-3433. OpenVAS Vulnerability Test $Id: fcore20093433.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3433 xine-lib Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 9 FEDORA-2009-3428 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory FEDORA-2009-3428. OpenVAS Vulnerability Test $Id: fcore20093428.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3428 xine-lib Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 9 FEDORA-2009-3428 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory FEDORA-2009-3428. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...