[SECURITY] [DSA 1782-1] New mplayer packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1782-1 [email protected] http://www.debian.org/security/ Steffen Joeris April 29, 2009 http://www.debian.org/security/faq -...

Mandriva Linux Security Advisory : mplayer (MDVSA-2009:014)

Several vulnerabilities have been discovered in mplayer, which could allow remote attackers to execute arbitrary code via a malformed TwinVQ file CVE-2008-5616, and in ffmpeg, as used by mplayer, related to the execution of DTS generation code CVE-2008-4866. The updated packages have been patched...

Mandriva Linux Security Advisory : mplayer (MDVSA-2009:013)

Several vulnerabilities have been discovered in mplayer, which could allow remote attackers to execute arbitrary code via a malformed TwinVQ file CVE-2008-5616, and in ffmpeg, as used by mplayer, related to the execution of DTS generation code CVE-2008-4866 and incorrect handling of DCAMAXFRAMESI...

Mandrake Security Advisory MDVSA-2009:014 (mplayer)

The remote host is missing an update to mplayer announced via advisory MDVSA-2009:014. OpenVAS Vulnerability Test $Id: mdksa2009014.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:014 mplayer Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Mandrake Security Advisory MDVSA-2009:013 (mplayer)

The remote host is missing an update to mplayer announced via advisory MDVSA-2009:013. OpenVAS Vulnerability Test $Id: mdksa2009013.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:013 mplayer Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Mandrake Security Advisory MDVSA-2009:013 (mplayer)

The remote host is missing an update to mplayer announced via advisory MDVSA-2009:013. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Gentoo Security Advisory GLSA 200901-07 (mplayer)

The remote host is missing updates announced in advisory GLSA 200901-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GLSA-200901-07 : MPlayer: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200901-07 MPlayer: Multiple vulnerabilities Multiple vulnerabilities have been reported in MPlayer: A stack-based buffer overflow was found in the strreadpacket function in libavformat/psxstr.c when processing crafted STR files th...

mplayer -- twinvq processing buffer overflow vulnerability

The remote host is missing an update to the system as announced in the referenced advisory. VID 7c5bd5b8-d652-11dd-a765-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 7c5bd5b8-d652-11dd-a765-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CVE-2008-5616

Stack-based buffer overflow in the demuxopenvqf function in libmpdemux/demuxvqf.c in MPlayer 1.0 rc2 before r28150 allows remote attackers to execute arbitrary code via a malformed TwinVQ file...

CVE-2008-5616

Stack-based buffer overflow in the demuxopenvqf function in libmpdemux/demuxvqf.c in MPlayer 1.0 rc2 before r28150 allows remote attackers to execute arbitrary code via a malformed TwinVQ file...

CVE-2008-5616

CVE-2008-5616 affects MPlayer 1.0 rc2 and earlier, with a stack-based buffer overflow in demux_open_vqf (libmpdemux/demux_vqf.c) that can be triggered by processing malformed TwinVQ files, leading to remote arbitrary code execution. Connected advisories/documents confirm multiple vendors (e.g., D...

SuSE 10 Security Update : pam_krb5 (ZYPP Patch Number 5616)

Insufficient file access permissions checks allowed users to read Kerberos tickes of other users if pamkrb5 was configured with the option 'existingticket'. CVE-2008-3825 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

Gentoo Security Advisory GLSA 200704-04 (openpbs)

The remote host is missing updates announced in advisory GLSA 200704-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2007-5616

ssh-signer in SSH Tectia Client and Server 5.x before 5.2.4, and 5.3.x before 5.3.6, on Unix and Linux allows local users to gain privileges via unspecified vectors...

CVE-2007-5616

ssh-signer in SSH Tectia Client and Server 5.x before 5.2.4, and 5.3.x before 5.3.6, on Unix and Linux allows local users to gain privileges via unspecified vectors...

CVE-2007-5616

CVE-2007-5616 affects SSH Tectia Client and Server 5.x before 5.2.4 and 5.3.x before 5.3.6 on Unix/Linux. A local user can escalate privileges via the ssh-signer component, with root access reported as the impact. The vulnerability is mitigated by upgrading to SSH Tectia client/server 5.2.4 or 5....

CVE-2006-5616

OpenPBS (as used in SUSE Linux 9.2–10.1) has multiple unspecified vulnerabilities that could allow an attacker to execute arbitrary code via unspecified vectors. The issues are documented across several sources (SUSE SUSECVEs, Gentoo GLSA 200704-04, OpenVAS entries, and NVD bug tracking) with a h...