924 matches found
CVE-2004-1187
CVE-2004-1187 corresponds to a heap-based overflow in xine-lib’s pnm_get_chunk, where the PNA_TAG handling does not guard input size, allowing remote attackers to cause arbitrary code execution via crafted PNA_TAG values. The issue is shared with other code paths (e.g., MPlayer) that reuse the sa...
CVE-2004-1311
Integer overflow in the realsetupandgetheader function in real.c for Unix MPlayer 1.0pre5 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a Real RTSP streaming media file with a -1 content-length field, which leads to a heap-based...
CVE-2004-1310
CVE-2004-1310 describes a stack-based buffer overflow in MPlayer 1.0pre5’s asf_mmst_streaming.c functionality. A malformed large MMST stream packet can overflow a stack buffer, allowing remote attackers to potentially execute arbitrary code. The vulnerability is tied to MPlayer’s MMST streaming c...
CVE-2004-1310
Stack-based buffer overflow in the asfmmststreaming.c functionality for MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a large MMST stream packet...
CVE-2004-1310
Stack-based buffer overflow in the asfmmststreaming.c functionality for MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a large MMST stream packet...
CVE-2004-1309
Heap-based buffer overflow in the demuxopenbmp function in demuxbmp.c for Unix MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a bitmap BMP file containing a large biClrUsed field...
CVE-2004-1188
The pnmgetchunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does not properly verify that the chunk size is less than the PREAMBLESIZE, which causes a read operation with a negative length that leads to a buffer overflow via 1 RMFTAG, 2 DATATAG,...
iDEFENSE Security Advisory 12.21.04: Multiple Vendor Xine version 0.99.2 PNM Handler PNA_TAG Heap Overflow Vulnerability
Multiple Vendor Xine version 0.99.2 PNM Handler PNATAG Heap Overflow Vulnerability iDEFENSE Security Advisory 12.21.04 www.idefense.com/application/poi/display?id=176&type=vulnerabilities December 21, 2004 I. BACKGROUND Xine is a multimedia player which runs on multiple platforms. More informatio...
GLSA-200412-21 : MPlayer: Multiple overflows
The remote host is affected by the vulnerability described in GLSA-200412-21 MPlayer: Multiple overflows iDEFENSE, Ariel Berkman and the MPlayer development team found multiple vulnerabilities in MPlayer. These include potential heap overflows in Real RTSP and pnm streaming code, stack overflows ...
MPlayer: Multiple overflows
Background MPlayer is a media player capable of handling multiple multimedia file formats. Description iDEFENSE, Ariel Berkman and the MPlayer development team found multiple vulnerabilities in MPlayer. These include potential heap overflows in Real RTSP and pnm streaming code, stack overflows in...
iDEFENSE Security Advisory 12.16.04: MPlayer Bitmap Parsing Remote Heap Overflow Vulnerability
MPlayer Bitmap Parsing Remote Heap Overflow Vulnerability iDEFENSE Security Advisory 12.16.04 http://www.idefense.com/application/poi/display?id=168 December 16, 2004 I. BACKGROUND MPlayer is a movie player for Linux that also runs on many other Unices, and non- x86 CPUs. It plays most MPEG, VOB,...
iDEFENSE Security Advisory 12.16.04: MPlayer MMST Streaming Stack Overflow Vulnerability
MPlayer MMST Streaming Stack Overflow Vulnerability iDEFENSE Security Advisory 12.16.04 http://www.idefense.com/application/poi/display?id=167 December 16, 2004 I. BACKGROUND MPlayer is a movie player for Linux that also runs on many other Unices, and non- x86 CPUs. It plays most MPEG, VOB, AVI,...
iDEFENSE Security Advisory 12.16.04: MPlayer Remote RTSP HeapOverflow Vulnerability
MPlayer Remote RTSP Heap Overflow Vulnerability iDEFENSE Security Advisory 12.16.04 http://www.idefense.com/application/poi/display?id=166 December 16, 2004 I. BACKGROUND MPlayer is a movie player for Linux that also runs on many other Unices, and non- x86 CPUs. It plays most MPEG, VOB, AVI,...
MPlayer < 1.0pre5try2 Get_Header Remote Client-Side Buffer Overflow
Binary data 2458.prm...
MPlayer 0.91.0 - MMST Get_Header Remote Client-Side Buffer Overflow
MPlayer 0.91.0 - MMST GetHeader Remote Client-Side Buffer Overflow // source: https://www.securityfocus.com/bid/11962/info A remote, client-side buffer overflow vulnerability reportedly affects MPlayer. This issue is due to a failure of the application to properly validate the length of...
MPlayer 0.9/1.0 - MMST Get_Header Remote Client-Side Buffer Overflow
// source: https://www.securityfocus.com/bid/11962/info A remote, client-side buffer overflow vulnerability reportedly affects MPlayer. This issue is due to a failure of the application to properly validate the length of user-supplied strings prior to copying them into static process buffers. An...
GLSA-200405-24 : MPlayer, xine-lib: vulnerabilities in RTSP stream handling
The remote host is affected by the vulnerability described in GLSA-200405-24 MPlayer, xine-lib: vulnerabilities in RTSP stream handling Multiple vulnerabilities have been found and fixed in the RTSP handling code common to recent versions of these two packages. These vulnerabilities include sever...
GLSA-200403-13 : Remote buffer overflow in MPlayer
The remote host is affected by the vulnerability described in GLSA-200403-13 Remote buffer overflow in MPlayer A vulnerability exists in the MPlayer HTTP parser which may allow an attacker to craft a special HTTP header 'Location:' which will trick MPlayer into executing arbitrary code on the...
GLSA-200408-01 : MPlayer: GUI filename handling overflow
The remote host is affected by the vulnerability described in GLSA-200408-01 MPlayer: GUI filename handling overflow The MPlayer GUI code contains several buffer overflow vulnerabilities, and at least one in the TranslateFilename function is exploitable. Impact : By enticing a user to play a file...