69 matches found
openSUSE 10 Security Update : xine-devel (xine-devel-5966)
This update of xine fixes multiple buffer overflows while parsing files : - CVE-2008-3231 - CVE-2008-5233 - CVE-2008-5234 - CVE-2008-5235 - CVE-2008-5236 - CVE-2008-5237 - CVE-2008-5238 - CVE-2008-5239 - CVE-2008-5240 - CVE-2008-5241 - CVE-2008-5242 - CVE-2008-5243 - CVE-2008-5244 - CVE-2008-5245...
CVE-2008-5235
Heap-based buffer overflow in the demuxrealsendchunk function in src/demuxers/demuxreal.c in xine-lib before 1.1.15 allows remote attackers to execute arbitrary code via a crafted Real Media file. NOTE: some of these details are obtained from third party information...
CVE-2008-5235
Heap-based buffer overflow in the demuxrealsendchunk function in src/demuxers/demuxreal.c in xine-lib before 1.1.15 allows remote attackers to execute arbitrary code via a crafted Real Media file. NOTE: some of these details are obtained from third party information...
CVE-2008-5235
CVE-2008-5235 is a heap-based buffer overflow in the Real demux path of xine-lib (= 1.1.16.3, though the exact fixed version is not reiterated in all connected documents. No exploitation details or in-the-wild indicators are provided in the supplied materials.
CVE-2007-5235
The CVE-2007-5235 entry describes a Cross-site Scripting (XSS) vulnerability in Uebimiau, specifically in index.php for versions 2.7.2 through 2.7.10. The issue allows remote attackers to inject arbitrary web script or HTML via the f_email parameter. The provided documents do not include explicit...
CVE-2006-5235
PHP remote file inclusion vulnerability in includes/functionskb.php in Dimension of phpBB 0.2.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter. NOTE: the provenance of this information is unknown; the details are obtained from third part...
CVE-2006-5235
The CVE-2006-5235 entry describes a PHP remote file inclusion (RFI) in Dimension of phpBB (0.2.6 and earlier) via the phpbb_root_path parameter, allowing an attacker to execute arbitrary PHP code. Related records (CVE-2006-7174) describe the same issue in the Dimension module’s includes/functions...
