CVE-2008-3827

Multiple integer underflows in the Real demuxer demuxreal.c in MPlayer 1.0rc2 and earlier allow remote attackers to cause a denial of service process termination and possibly execute arbitrary code via a crafted video file that causes the streamread function to read or write arbitrary memory...

CVE-2008-3827

Multiple integer underflows in the Real demuxer demuxreal.c in MPlayer 1.0rc2 and earlier allow remote attackers to cause a denial of service process termination and possibly execute arbitrary code via a crafted video file that causes the streamread function to read or write arbitrary memory...

CVE-2008-3827

CVE-2008-3827 affects MPlayer 1.0_rc2 and earlier, due to multiple integer underflows in the Real demuxer (demux_real.c) that can cause a remote attacker to read/write arbitrary memory via a crafted Real Media file, potentially leading to code execution or process termination. The vulnerability a...

CVE-2008-3827

Multiple integer underflows in the Real demuxer demuxreal.c in MPlayer 1.0rc2 and earlier allow remote attackers to cause a denial of service process termination and possibly execute arbitrary code via a crafted video file that causes the streamread function to read or write arbitrary memory...

openSUSE 10 Security Update : samba (samba-3827)

The previous security fix for CVE-2007-2447 missed one character in the shell escape handling. Also fixed were some regressions introduced by the previous update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSU...

CVE-2007-3827

Mozilla Firefox is affected by CVE-2007-3827: cookies can be set with a null domain (domainless cookies), enabling information to pass between arbitrary domains and potential user tracking via document.cookie in javascript:. window. The vulnerability stems from how cookies are handled with a null...

CVE-2006-3827

The CVE-2006-3827 entry affects Kailash Nadh’s boastMachine (formerly bMachine) up to v3.1. The issue is an SQL injection in bmc/Inc/core/admin/search.inc.php, exploitable by remote authenticated administrators via the blog parameter. This is caused by unsanitized input being used in SQL queries,...

CVE-2005-3827

CVE-2005-3827 describes an SQL injection in AgileBill 1.4.92 and earlier, via the id parameter in the product_cat function/endpoint. The vulnerability allows remote attackers to execute arbitrary SQL commands, with CVSS v2 base metrics: AV:N/AC:L/Au:N/C:P/I:P/A:P and a base score of 7.5 (HIGH). A...