CVE-2010-3907

CVE-2010-3907 affects VLC Media Player’s Real demuxer (Real Decoding) via multiple integer overflows in real.c prior to 1.1.6, allowing remote crashes or possibly arbitrary code execution through a zero i_subpackets Real Media file, leading to a heap overflow. Affected product/version: VLC

CVE-2010-3907

Multiple integer overflows in real.c in the Real demuxer plugin in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a zero isubpackets value in a Real Media file, leading to a heap-based buffer...

VLC Media Player < 1.1.6 Multiple Vulnerabilities

Binary data 801178.prm...

CVE-2009-3907

CVE-2009-3907 is a duplicate of CVE-2009-3607. The underlying issue is in Poppler (0.x): integer overflow in create_surface_from_thumbnail_data (glib/poppler-page.cc) that can cause memory corruption, potentially leading to denial of service or remote code execution when processing crafted PDFs. ...

[SECURITY] [DSA 1941-1] New poppler packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1941-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 25, 2009 http://www.debian.org/security/faq -...

Gentoo Security Advisory GLSA 200809-12 (newsbeuter)

The remote host is missing updates announced in advisory GLSA 200809-12. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200809-12 (newsbeuter)

The remote host is missing updates announced in advisory GLSA 200809-12. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-3907

Removed by vendor...

CVE-2008-3907

The CVE-2008-3907 entry concerns Newsbeuter’s open-in-browser command. Affected software: Newsbeuter prior to version 1.1 (and discussed in GLSA 200809-12). Root cause: open-in-browser does not properly escape shell metacharacters in feed URLs before passing to system(), enabling remote execution...

CVE-2007-3907

CVE-2007-3907 affects LedgerSMB 1.2.0–1.2.6. An authentication bypass allows remote attackers to perform actions as an arbitrary user via a crafted URL using a redirect parameter and a callback parameter containing an escaped URL. The exact vectors are not detailed in the provided documents. No p...

TiVo Detection via TCP

Binary data 3907.prm...

CVE-2006-3907

CVE-2006-3907 affects Siemens SpeedStream 2624. A remote attacker can cause a DoS by sending a crafted packet to the device’s web administration interface, resulting in a device hang. The NVD lists a base score of 5.0 (Medium) with network attack vector and no authentication required. Public deta...

CVE-2005-3907

The CVE affects the Sun/Oracle Java Runtime Environment and JDK/JRE 5.0 Update 3 and earlier, where an untrusted Java applet may bypass security restrictions to access system resources and execute arbitrary code remotely. The root cause is an unspecified vulnerability in Java applets that can esc...