openSUSE 10 Security Update : libcdio (libcdio-5059)

Long file names in ISO file systems with Joliet extension could cause a buffer overflow in libcdio CVE-2007-6613. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libcdio-5059. The text...

Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : libcdio vulnerability (USN-580-1)

Devon Miller discovered that the iso-info and cd-info tools did not properly perform bounds checking. If a user were tricked into using these tools with a crafted iso image, an attacker could cause a denial of service core dump and possibly execute arbitrary code. Note that Tenable Network Securi...

USN-580-1: libcdio vulnerability

Devon Miller discovered that the iso-info and cd-info tools did not properly perform bounds checking. If a user were tricked into using these tools with a crafted iso image, an attacker could cause a denial of service core dump and possibly execute arbitrary code...

GLSA-200801-08 : libcdio: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200801-08 libcdio: User-assisted execution of arbitrary code Devon Miller reported a boundary error in the 'printiso9660recurse' function in files cd-info.c and iso-info.c when processing long filenames within Joliet images. Impac...

libcdio: User-assisted execution of arbitrary code

Background libcdio is a library for accessing CD-ROM and CD images. Description Devon Miller reported a boundary error in the "printiso9660recurse" function in files cd-info.c and iso-info.c when processing long filenames within Joliet images. Impact A remote attacker could entice a user to open ...

GNU libcdio库cd-info/iso-info文件栈溢出漏洞

BUGTRAQ ID: 27131 CVECAN ID: CVE-2007-6613 GNU压缩磁盘输入和控制库（libcdio）是用于访问CD-ROM和CD镜像的函数库。 libcdio库的cd-info.c和iso-info.c文件中的printiso9660recurse函数中存在栈溢出漏洞，本地攻击者可能利用此漏洞提升自己的权限。 如果用户受骗使用该库加载了包含有超长joilet文件名的磁盘或镜像的话，就可能导致拒绝服务（core dump）或执行任意指令。以下是src/iso-info.c的printiso9660recurse函数中的漏洞代码： CDIOLISTFOREACH...

Fedora 8 : libcdio-0.78.2-4.fc8 (2008-0136)

Wed Jan 2 2008 Adrian Reber - 0.78.2-4 - fixes 427197 Long Joliet file name overflows cdio's buffer Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 7 : libcdio-0.78.2-4.fc7 (2008-0104)

Wed Jan 2 2008 Adrian Reber - 0.78.2-4 - fixes 427197 Long Joliet file name overflows cdio's buffer - Fri Aug 24 2007 Adrian Reber - 0.78.2-3 - rebuilt - Mon Jul 23 2007 Adrian Reber - 0.78.2-2 - updated to 0.78.2 221359 this time for real - Thu Jan 4 2007 Adrian Reber - 0.78.2-1 - updated to...

CVE-2007-6613

Stack-based buffer overflow in the printiso9660recurse function in iso-info src/iso-info.c in GNU Compact Disc Input and Control Library libcdio 0.79 and earlier allows context-dependent attackers to cause a denial of service core dump and possibly execute arbitrary code via a disk or image that...

CVE-2007-6613

Stack-based buffer overflow in the printiso9660recurse function in iso-info src/iso-info.c in GNU Compact Disc Input and Control Library libcdio 0.79 and earlier allows context-dependent attackers to cause a denial of service core dump and possibly execute arbitrary code via a disk or image that...

Stack overflow

Stack-based buffer overflow in the printiso9660recurse function in iso-info src/iso-info.c in GNU Compact Disc Input and Control Library libcdio 0.79 and earlier allows context-dependent attackers to cause a denial of service core dump and possibly execute arbitrary code via a disk or image that...

DEBIAN-CVE-2007-6613

Stack-based buffer overflow in the printiso9660recurse function in iso-info src/iso-info.c in GNU Compact Disc Input and Control Library libcdio 0.79 and earlier allows context-dependent attackers to cause a denial of service core dump and possibly execute arbitrary code via a disk or image that...

CVE-2007-6613

Stack-based buffer overflow in the printiso9660recurse function in iso-info src/iso-info.c in GNU Compact Disc Input and Control Library libcdio 0.79 and earlier allows context-dependent attackers to cause a denial of service core dump and possibly execute arbitrary code via a disk or image that...

CVE-2007-6613

CVE-2007-6613 is a stack-based buffer overflow in libcdio (libcdio 0.79 and earlier) within the print_iso9660_recurse function of iso-info.c. The overflow can be triggered by a disk or image containing a long Joliet filename, allowing a context-dependent attacker to cause a denial of service (cor...

CVE-2007-6613

Stack-based buffer overflow in the printiso9660recurse function in iso-info src/iso-info.c in GNU Compact Disc Input and Control Library libcdio 0.79 and earlier allows context-dependent attackers to cause a denial of service core dump and possibly execute arbitrary code via a disk or image that...

[SECURITY] Fedora 8 Update: libcdio-0.78.2-4.fc8

This library provides an interface for CD-ROM access. It can be used by applications that need OS- and device-independent access to CD-ROM devices...

libcdio 0.7x - GNU Compact Disc Input and Control Library Buffer Overflow

source: https://www.securityfocus.com/bid/27131/info The GNU Compact Disc Input and Control Library 'libcdio' is prone to multiple buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data. The issues occur when the 'cd-info' and 'iso-info' program...

CVE-2004-1476

CVE-2004-1476 affects xine-lib (versions 1-rc2 through 1-rc5, derived from libcdio). The vulnerability is a stack-based buffer overflow in the VideoCD (VCD) handling, exploitable via a VideoCD with an unterminated disk label, which can lead to arbitrary code execution. OpenVAS/Gentoo advisories i...

CVE-2004-1476

Stack-based buffer overflow in the VideoCD VCD code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label...

DEBIAN-CVE-2004-1476

Stack-based buffer overflow in the VideoCD VCD code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label...