VCDGear 3.56 Build 050213 - 'FILE' Local Code Execution

/ 0day Discovered by: InTeL Auther: InTeL Attack Vector: SEH overwrite Type: Local Tested on Win2k SP4 English Software: VCDGear v3.56 build 050213 Website: www.vcdgear.com Description: "VCDGear is a program designed to allow a user to extract MPEG streams from CD images, convert VCD files to MPE...

mpg123: Heap overflow

Background mpg123 is a real time audio player designed for the MPEG format. Description In httpdget.c, a variable is assigned to the heap, and is supposed to receive a smaller allocation. As this variable was not terminated properly, strncpy will overwrite the data assigned next in memory. Impact...

[SECURITY] [DSA 1074-1] New mpg123 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1074-1 [email protected] http://www.debian.org/security/ Martin Schulze May 24th, 2006 http://www.debian.org/security/faq -...

DSA-1074-1 mpg123 - buffer overflow

Bulletin has no description...

Apple QuickTime MPEG-4 movie buffer overflow

Overview Apple QuickTime fails to properly handle MPEG-4 movie files. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code or cause a denial of service condition. Description Apple's QuickTime Player is multimedia software that allows users to view local and...

GLSA-200604-16 : xine-lib: Buffer overflow vulnerability

The remote host is affected by the vulnerability described in GLSA-200604-16 xine-lib: Buffer overflow vulnerability Federico L. Bossi Bonin discovered that when handling MPEG streams xine-lib fails to make a proper boundary check of the input data supplied by the user before copying it to an...

Buffer overflow

Buffer overflow in xinelistdeletecurrent in libxine 1.14 and earlier, as distributed in xine-lib 1.1.1 and earlier, allows remote attackers to execute arbitrary code via a crafted MPEG stream...

CVE-2006-1664

Buffer overflow in xinelistdeletecurrent in libxine 1.14 and earlier, as distributed in xine-lib 1.1.1 and earlier, allows remote attackers to execute arbitrary code via a crafted MPEG stream...

CVE-2006-1664

Buffer overflow in xinelistdeletecurrent in libxine 1.14 and earlier, as distributed in xine-lib 1.1.1 and earlier, allows remote attackers to execute arbitrary code via a crafted MPEG stream...

CVE-2006-1664

CVE-2006-1664 concerns a buffer overflow in xine_list_delete_current within libxine (v1.14 and earlier; as distributed in xine-lib v1.1.1 and earlier). The flaw permits remote code execution via a crafted MPEG stream. The entry lists a NETWORK attack vector with no authentication, no user interac...

CVE-2006-1664

Buffer overflow in xinelistdeletecurrent in libxine 1.14 and earlier, as distributed in xine-lib 1.1.1 and earlier, allows remote attackers to execute arbitrary code via a crafted MPEG stream...

CVE-2006-1664

Buffer overflow in xinelistdeletecurrent in libxine 1.14 and earlier, as distributed in xine-lib 1.1.1 and earlier, allows remote attackers to execute arbitrary code via a crafted MPEG stream...

[EXPL] Libxine MPEG Stream Buffer Overflow (Exploit)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Xine / libxine buffer overflow

Buffer overflow on MPEG stream parsing...

Libxine 1.14 - MPEG Stream Buffer Overflow (PoC)

!/usr/bin/perl Libxine = 1.14 : MPEG Stream Buffer overflow vulnerability / PoC Federico L. Bossi Bonin fbossiatnetcomm.com.ar gdb run /tmp/egg.mpeg Starting program: /usr/bin/gxine /tmp/egg.mpeg Program received signal SIGSEGV, Segmentation fault. Switching to Thread -1276580944 LWP 30688...

Libxine <= 1.14 MPEG Stream Buffer Overflow Vulnerability PoC

No description provided by source. !/usr/bin/perl Libxine = 1.14 : MPEG Stream Buffer overflow vulnerability / PoC Federico L. Bossi Bonin fbossiatnetcomm.com.ar gdb run /tmp/egg.mpeg Starting program: /usr/bin/gxine /tmp/egg.mpeg Program received signal SIGSEGV, Segmentation fault. Switching to...

Libxine 1.14 - MPEG Stream Buffer Overflow (PoC)

Libxine 1.14 - MPEG Stream Buffer Overflow PoC !/usr/bin/perl Libxine = 1.14 : MPEG Stream Buffer overflow vulnerability / PoC Federico L. Bossi Bonin fbossiatnetcomm.com.ar gdb run /tmp/egg.mpeg Starting program: /usr/bin/gxine /tmp/egg.mpeg Program received signal SIGSEGV, Segmentation fault...

CVE-2005-4582

Electric Sheep 2.6.3 does not require authentication or integrity checks from the server to the client, which allows remote attackers to download and display arbitrary MPEG movie files via 1 DNS spoofing, 2 a URL on the command line, or 3 a URL in the configuration file. NOTE: the same attack...

CVE-2005-4582

Electric Sheep 2.6.3 does not require authentication or integrity checks from the server to the client, which allows remote attackers to download and display arbitrary MPEG movie files via 1 DNS spoofing, 2 a URL on the command line, or 3 a URL in the configuration file. NOTE: the same attack...

GLSA-200510-02 : Berkeley MPEG Tools: Multiple insecure temporary files

The remote host is affected by the vulnerability described in GLSA-200510-02 Berkeley MPEG Tools: Multiple insecure temporary files Mike Frysinger of the Gentoo Security Team discovered that mpegencode and the conversion utilities were creating temporary files with predictable or fixed filenames...