[SECURITY] [DSA 2044-1] New mplayer packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-2044-1 [email protected] http://www.debian.org/security/ Devin Carraway May 11, 2010 http://www.debian.org/security/faq -...

DSA-2044-1 mplayer - arbitrary code execution

Bulletin has no description...

MPlayer integer overflow

Integer overflow on RDT streams playing...

[SECURITY] [DSA 2044-1] New mplayer packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2044-1 [email protected] http://www.debian.org/security/ Devin Carraway May 11, 2010 http://www.debian.org/security/faq -...

mplayer <= 4.4.1 NULL pointer dereference exploit poc

No description provided by source. Exploit Title: mplayer = 4.4.1 NULL pointer dereference exploit poc 0 day Date: 17/03/2010 Author: Pietro Oliva Software Link: Version: = 4.4.1 Tested on: ubuntu 9.10 but should work in windows too CVE : Program received signal SIGSEGV, Segmentation fault...

Mplayer 4.4.1 NULL Pointer Dereference

Exploit Title: mplayer : push %ebp 0x081176d1 : mov %esp,%ebp 0x081176d3 : fld1 0x081176d5 : mov 0x8%ebp,%eax 0x081176d8 : mov %eax,%eax == mplayer tries to dereference eax, which is a NULL pointer!!! 0x081176da : lea 0x0%esi,%esi 0x081176e0 : fmull 0x28%eax 0x081176e3 : mov 0x18%eax,%eax...

mplayer 4.4.1 - Null Pointer Dereference (PoC)

mplayer 4.4.1 - Null Pointer Dereference PoC Exploit Title: mplayer : push %ebp 0x081176d1 : mov %esp,%ebp 0x081176d3 : fld1 0x081176d5 : mov 0x8%ebp,%eax 0x081176d8 : mov %eax,%eax == mplayer tries to dereference eax, which is a NULL pointer!!! 0x081176da : lea 0x0%esi,%esi 0x081176e0 : fmull...

mplayer <= 4.4.1 NULL pointer dereference exploit poc

Exploit for multiple platform in category dos / poc ===================================================== mplayer : push %ebp 0x081176d1 : mov %esp,%ebp 0x081176d3 : fld1 0x081176d5 : mov 0x8%ebp,%eax 0x081176d8 : mov %eax,%eax == mplayer tries to dereference eax, which is a NULL pointer!!!...

mplayer 4.4.1 - Null Pointer Dereference (PoC)

Exploit Title: mplayer : push %ebp 0x081176d1 : mov %esp,%ebp 0x081176d3 : fld1 0x081176d5 : mov 0x8%ebp,%eax 0x081176d8 : mov %eax,%eax == mplayer tries to dereference eax, which is a NULL pointer!!! 0x081176da : lea 0x0%esi,%esi 0x081176e0 : fmull 0x28%eax 0x081176e3 : mov 0x18%eax,%eax...

MPlayer Real Demuxer stream_read Heap Overflow (CVE-2008-3827)

MPlayer is an open source multimedia player for Linux that is also available in a Mac OS X and Windows versions. It can play many audio and video formats MPEG, DivX, ogg, RealMedia, etc. as well as various streaming protocols. It is highly portable and available for multiple platforms. There exis...

Mandriva Security Advisory MDVSA-2009:335 (ffmpeg)

The remote host is missing an update to ffmpeg announced via advisory MDVSA-2009:335. OpenVAS Vulnerability Test $Id: mdksa2009335.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:335 ffmpeg Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

Mandriva Security Advisory MDVSA-2009:335 (ffmpeg)

The remote host is missing an update to ffmpeg announced via advisory MDVSA-2009:335. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandriva Linux Security Advisory : ffmpeg (MDVSA-2009:335)

A vulnerability was discovered and corrected in ffmpeg : MPlayer allows remote attackers to cause a denial of service application crash via 1 a malformed AAC file, as demonstrated by lol-vlc.aac; or 2 a malformed Ogg Media OGM file, as demonstrated by lol-ffplay.ogm, different vectors than...

MPlayer demux_open_vqf TwinVQ File Handling Buffer Overflow (CVE-2008-5616)

MPlayer is an open source multimedia player for Linux that is also available in a Mac OS X and Windows versions. It can play many audio and video formats MPEG, DivX, ogg, TwinVQ, etc. as well as various streaming protocols. It is highly portable and available for multiple platforms. There exists ...

Mandriva Security Advisory MDVSA-2009:297 (ffmpeg)

The remote host is missing an update to ffmpeg announced via advisory MDVSA-2009:297. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandriva Linux Security Advisory : ffmpeg (MDVSA-2009:297-1)

Vulnerabilities have been discovered and corrected in ffmpeg : - The ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service application crash via a crafted GIF file CVE-2008-3230 - FFmpeg 0.4.9, as used by MPlayer, allows context-dependent attackers to cause a denial of...

MPlayer和VLC Player real数据传送远程整数下溢漏洞

Bugraq ID: 35821 CNCAN ID：CNCAN-2009072802 MPlayer和VLC Player是流行的媒体播放器。 MPlayer和VLC Player不正确处理用户提供的输入，远程攻击者可以利用漏洞进行整数下溢攻击，可能以应用程序权限执行任意指令。 Mplayer 源文件: stream/realrtsp/real.c function: int realgetrdtchunkrtspt rtspsession, char buffer, int rdtrawdata VLC 源文件: modules/access/rtsp/real.c function:...

[Full-disclosure] [DZC-2009-001] The Movie Player and VLC Media Player Real Data Transport parsing integer underflow.

Advisory: The Movie Player and VLC Media Player Real Data Transport parsing integer underflow. Affected products: The Movie player svn r29438 1 VLC media player = 1.0.0 2 Possible others applications that use the xine lib code 3. Discovred by: tixxDZ tixxdz at gmail dot com DZCORE Labs, Algeria...

Debian Security Advisory DSA 1782-1 (mplayer)

The remote host is missing an update to mplayer announced via advisory DSA 1782-1. OpenVAS Vulnerability Test $Id: deb17821.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1782-1 mplayer Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian: Security Advisory (DSA-1782-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...