235 matches found
Debian Security Advisory DSA 1851-1 (gst-plugins-bad0.10)
The remote host is missing an update to gst-plugins-bad0.10 announced via advisory DSA 1851-1. OpenVAS Vulnerability Test $Id: deb18511.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1851-1 gst-plugins-bad0.10 Authors: Thomas Reinke Copyright: Copyright c...
DSA-1851-1 gst-plugins-bad0.10 - arbitrary code execution
Bulletin has no description...
USN-771-1: libmodplug vulnerabilities
It was discovered that libmodplug did not correctly handle certain parameters when parsing MED media files. If a user or automated system were tricked into opening a crafted MED file, an attacker could execute arbitrary code with privileges of the user invoking the program. CVE-2009-1438 Manfred...
[USN-771-1] libmodplug vulnerabilities
=========================================================== Ubuntu Security Notice USN-771-1 May 07, 2009 libmodplug vulnerabilities CVE-2009-1438, CVE-2009-1513 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS...
libmodplug library multiple security vulnerabilities
Buffer overflow on .PAT and .MED files parsing...
CVE-2009-1438
Integer overflow in the CSoundFile::ReadMed function src/loadmed.cpp in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted 1 song comment or 2 song name, which triggers a...
Integer overflow
Integer overflow in the CSoundFile::ReadMed function src/loadmed.cpp in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted 1 song comment or 2 song name, which triggers a...
DEBIAN-CVE-2009-1438
Integer overflow in the CSoundFile::ReadMed function src/loadmed.cpp in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted 1 song comment or 2 song name, which triggers a...
CVE-2009-1438
Integer overflow in the CSoundFile::ReadMed function src/loadmed.cpp in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted 1 song comment or 2 song name, which triggers a...
CVE-2009-1438
Integer overflow in the CSoundFile::ReadMed function src/loadmed.cpp in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted 1 song comment or 2 song name, which triggers a...
CVE-2009-1438
An integer overflow vulnerability exists in the CSoundFile::ReadMed function (located in src/load_med.cpp) of libmodplug before version 0.8.6 . This flaw can be triggered by a context-dependent attacker through a MED file containing a crafted song comment or song name. The overflow leads to a hea...
CVE-2009-1438: Undefined Security Weakness
Integer overflow in the CSoundFile::ReadMed function src/loadmed.cpp in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted 1 song comment or 2 song name, which triggers a...
VulnCheck KEV: CVE-2009-1438
Integer overflow in the CSoundFile::ReadMed function src/loadmed.cpp in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted 1 song comment or 2 song name, which triggers a...
千千静听 med 文件格式堆溢出
No description provided by source. html body OBJECT ID="ttp" WIDTH="250" HEIGHT="400" CLASSID="CLSID:89AE5F82-410A-4040-9387-68D1144EFD03" /OBJECT INPUT TYPE="button" NAME="test" CAPTION="test" onClick="Test" SCRIPT LANGUAGE="JavaScript" !-- function Test ...
Unfixed XSS vulnerability at www.med-center.de
Security researcher By Encore, has submitted on 05/04/2007 a cross-site-scripting XSS vulnerability affecting www.med-center.de, which at the time of submission ranked 5341441 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/04/2007. It is...