908 matches found
GLSA-200504-19 : MPlayer: Two heap overflow vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200504-19 MPlayer: Two heap overflow vulnerabilities Heap overflows have been found in the code handling RealMedia RTSP and Microsoft Media Services streams over TCP MMST. Impact : By setting up a malicious server and enticing a...
MPlayer: Two heap overflow vulnerabilities
Background MPlayer is a media player capable of handling multiple multimedia file formats. Description Heap overflows have been found in the code handling RealMedia RTSP and Microsoft Media Services streams over TCP MMST. Impact By setting up a malicious server and enticing a user to use its...
MPlayer < 1.0pre7 Multiple Remote Heap-based Overflows
Binary data 2844.prm...
mplayer & libxine -- MMS and Real RTSP buffer overflow vulnerabilities
A xine security announcement reports: By a user receiving data from a malicious network streaming server, an attacker can overrun a heap buffer, which can, on some systems, lead to or help in executing attacker-chosen malicious code with the permissions of the user running a xine-lib based media...
CVE-2004-1310
Stack-based buffer overflow in the asfmmststreaming.c functionality for MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a large MMST stream packet...
CVE-2004-1188
The pnmgetchunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does not properly verify that the chunk size is less than the PREAMBLESIZE, which causes a read operation with a negative length that leads to a buffer overflow via 1 RMFTAG, 2 DATATAG,...
CVE-2004-1188
The pnmgetchunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does not properly verify that the chunk size is less than the PREAMBLESIZE, which causes a read operation with a negative length that leads to a buffer overflow via 1 RMFTAG, 2 DATATAG,...
DEBIAN-CVE-2004-1310
Stack-based buffer overflow in the asfmmststreaming.c functionality for MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a large MMST stream packet...
DEBIAN-CVE-2004-1311
Integer overflow in the realsetupandgetheader function in real.c for Unix MPlayer 1.0pre5 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a Real RTSP streaming media file with a -1 content-length field, which leads to a heap-based...
CVE-2004-1311
Integer overflow in the realsetupandgetheader function in real.c for Unix MPlayer 1.0pre5 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a Real RTSP streaming media file with a -1 content-length field, which leads to a heap-based...
CVE-2004-1309
Heap-based buffer overflow in the demuxopenbmp function in demuxbmp.c for Unix MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a bitmap BMP file containing a large biClrUsed field...
CVE-2004-1310
Stack-based buffer overflow in the asfmmststreaming.c functionality for MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a large MMST stream packet...
CVE-2004-1285
Buffer overflow in the getheader function in asfmmststreaming.c for MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a crafted ASF video stream...
CVE-2004-1309
Heap-based buffer overflow in the demuxopenbmp function in demuxbmp.c for Unix MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a bitmap BMP file containing a large biClrUsed field...
CVE-2004-1311
Integer overflow in the realsetupandgetheader function in real.c for Unix MPlayer 1.0pre5 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a Real RTSP streaming media file with a -1 content-length field, which leads to a heap-based...
DEBIAN-CVE-2004-1309
Heap-based buffer overflow in the demuxopenbmp function in demuxbmp.c for Unix MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a bitmap BMP file containing a large biClrUsed field...
Mandrake Linux Security Advisory : mplayer (MDKSA-2004:157)
A number of vulnerabilities were discovered in the MPlayer program by iDEFENSE, Ariel Berkman, and the MPlayer development team. These vulnerabilities include potential heap overflows in Real RTSP and pnm streaming code, stack overflows in MMST streaming code, and multiple buffer overflows in the...
CVE-2004-1311
CVE-2004-1311 affects Unix MPlayer 1.0pre5 with an integer overflow in real_setup_and_get_header() in real.c. A Real RTSP streaming media file containing a -1 content-length field can trigger a heap-based buffer overflow, enabling remote denial of service (application crash) and potentially arbit...
CVE-2004-1309
CVE-2004-1309 describes a heap-based buffer overflow in the BMP demuxer of MPlayer (Unix, version around 1.0pre5) specifically in the function demux_open_bmp within demux_bmp.c . The vulnerability can be triggered by a BMP file with a large biClrUsed field, potentially allowing a remote attacker ...
