CVE-2005-2213

Buffer overflow in the mmsinterpheader function in mms.c in MMS Ripper before 0.6.4 might allow remote attackers to execute arbitrary code via a file with more than 20 streams...

CVE-2005-2213

Buffer overflow in the mmsinterpheader function in mms.c in MMS Ripper before 0.6.4 might allow remote attackers to execute arbitrary code via a file with more than 20 streams...

CVE-2005-2213: Undefined Security Weakness

Buffer overflow in the mmsinterpheader function in mms.c in MMS Ripper before 0.6.4 might allow remote attackers to execute arbitrary code via a file with more than 20 streams...

USN-123-1: Xine library vulnerabilities

Two buffer overflows have been discovered in the MMS and Real RTSP stream handlers of the Xine library. By tricking a user to connect to a malicious MMS or RTSP video/audio stream source with an application that uses this library, an attacker could crash the client and possibly even execute...

CVE-2005-1195

Multiple heap-based buffer overflows in the code used to handle 1 MMS over TCP MMST streams or 2 RealMedia RTSP streams in xine-lib before 1.0, and other products that use xine-lib such as MPlayer 1.0pre6 and earlier, allow remote malicious servers to execute arbitrary code...

CVE-2005-1195

Multiple heap-based buffer overflows in the code used to handle 1 MMS over TCP MMST streams or 2 RealMedia RTSP streams in xine-lib before 1.0, and other products that use xine-lib such as MPlayer 1.0pre6 and earlier, allow remote malicious servers to execute arbitrary code...

Xine media library multiple buffer overflows

Multiple buffer overflows on MMS and RTSP streaming data processing...

CVE-2005-1195

Multiple heap-based buffer overflows in the code used to handle 1 MMS over TCP MMST streams or 2 RealMedia RTSP streams in xine-lib before 1.0, and other products that use xine-lib such as MPlayer 1.0pre6 and earlier, allow remote malicious servers to execute arbitrary code...

mplayer & libxine -- MMS and Real RTSP buffer overflow vulnerabilities

A xine security announcement reports: By a user receiving data from a malicious network streaming server, an attacker can overrun a heap buffer, which can, on some systems, lead to or help in executing attacker-chosen malicious code with the permissions of the user running a xine-lib based media...

LG U8120 Mobile Phone Denial of Service

=============================================================== Model: LG U8120 other LG phones maybe vulnerable Auth: http://www.lge.com Vulnerability Type: Remote Denial Of Service -- Disclaimer: ========== The information is provided "as is" without warranty of any kind. The author of this iss...

Microsoft Internet Explorer 6 - mms Protocol Handler Executable Command Line Injection

Microsoft Internet Explorer 6 - mms Protocol Handler Executable Command Line Injection source: https://www.securityfocus.com/bid/10879/info A vulnerability has been reported to exist in Microsoft Internet Explorer that may allow remote attackers to pass arbitrary command line arguments to an...

CVE-2002-0697

Microsoft Metadirectory Services (MMS) 2.2 is affected by a vulnerability where remote attackers can bypass authentication by connecting an LDAP client directly to MMS and bypassing MMS credential checks, potentially allowing modification of sensitive data. The affected component is MMS 2.2; the ...

CVE-2002-0697: Undefined Security Weakness

Microsoft Metadirectory Services MMS 2.2 allows remote attackers to bypass authentication and modify sensitive data by using an LDAP client to directly connect to MMS and bypass the checks for MMS credentials...

CVE-2000-1209: Undefined Security Weakness

The "sa" account is installed with a default null password on 1 Microsoft SQL Server 2000, 2 SQL Server 7.0, and 3 Data Engine MSDE 1.0, including third party packages that use these products such as 4 Tumbleweed Secure Mail MMS 5 Compaq Insight Manager, and 6 Visio 2000, which allows remote...

CVE-2000-0772

The CVE-2000-0772 entry concerns Tumbleweed Messaging Management System (MMS) 4.6 and earlier (formerly Worldtalk Worldsecure) that creates a default account named “sa” with no password, enabling unauthenticated access. The NVD entry attributes a CVSSv2 base score of 7.5 (HIGH) with network attac...

CVE-2000-0772: Undefined Security Weakness

The installation of Tumbleweed Messaging Management System MMS 4.6 and earlier formerly Worldtalk Worldsecure creates a default account "sa" with no password...