Debian: Security Advisory (DSA-901-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-6609

Multiple stack-based buffer overflows in the CPLIReadTagOGG function in CPIPlaylistItem.c in CoolPlayer 217 and earlier allow user-assisted remote attackers to execute arbitrary code via a long 1 cTag or 2 cValue field in an OGG Vorbis file...

Stack overflow

Multiple stack-based buffer overflows in the CPLIReadTagOGG function in CPIPlaylistItem.c in CoolPlayer 217 and earlier allow user-assisted remote attackers to execute arbitrary code via a long 1 cTag or 2 cValue field in an OGG Vorbis file...

CVE-2007-6609

Summary of CVE-2007-6609 (CPI_PlaylistItem.c, CoolPlayer) : The vulnerability is a chain of stack-based buffer overflows in CPLI_ReadTag_OGG within CPI_PlaylistItem.c affecting CoolPlayer 217 and earlier. A long (cTag or cValue) field in an OGG Vorbis file can allow user-assisted remote code exec...

Buffer-overflow in CoolPlayer 217

Luigi Auriemma Application: CoolPlayer http://coolplayer.sourceforge.net Versions: = 217 Platforms: Windows Bug: buffer-overflow in CPLIReadTagOGG Exploitation: local Date: 28 Dec 2007 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix...

CoolPlayer media player buffer overflow

Buffer overflow on OGG Vorbis parsing...

CoolPlayer 2.17 - CPLI_ReadTag_OGG() Buffer Overflow

CoolPlayer 2.17 - CPLIReadTagOGG Buffer Overflow source: https://www.securityfocus.com/bid/27061/info CoolPlayer is prone a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. The issue occurs when handling specially crafted OGG...

CoolPlayer 2.17 - 'CPLI_ReadTag_OGG()' Buffer Overflow

source: https://www.securityfocus.com/bid/27061/info CoolPlayer is prone a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. The issue occurs when handling specially crafted OGG files. Successfully exploiting this issue allows...

[SECURITY] Fedora Core 6 Update: flac-1.1.2-28

FLAC stands for Free Lossless Audio Codec. Grossly oversimplified, FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, flac, a command-line program to encode and decode FLAC files, metaflac, a command-line...

openSUSE 10 Security Update : libvorbis (libvorbis-4583)

Specially crafted OGG files could crash libvorbis or make it run into an endless loop CVE-2007-4029, CVE-2007-4065, CVE-2007-4066. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libvorbis-458...

libvorbis security update

CentOS Errata and Security Advisory CESA-2007:0912-01 Updated libvorbis packages to correct several security issues are now available for Red Hat Enterprise Linux 2.1 This update has been rated as having important security impact by the Red Hat Security Response Team. The libvorbis package contai...

RHEL 2.1 : libvorbis (RHSA-2007:0912)

Updated libvorbis packages to correct several security issues are now available for Red Hat Enterprise Linux 2.1 This update has been rated as having important security impact by the Red Hat Security Response Team. The libvorbis package contains runtime libraries for use in programs that support...

Multiple libvorbis flaws (CVE-2007-4066, CVE-2007-4029)

Multiple buffer overflows in Xiph.Org libvorbis before 1.2.0 allow context-dependent attackers to cause a denial of service or have other unspecified impact via a crafted OGG file, aka trac Changesets 13162, 13168, 13169, 13170, 13172, 13211, and 13215, as demonstrated by an overflow in oggenc.ex...

Important: Red Hat Security Advisory: libvorbis security update

Updated libvorbis packages to correct several security issues are now available for Red Hat Enterprise Linux 2.1 This update has been rated as having important security impact by the Red Hat Security Response Team. The libvorbis package contains runtime libraries for use in programs that support...

Multiple libvorbis flaws (CVE-2007-4066, CVE-2007-4029)

lib/vorbisfile.c in libvorbisfile in Xiph.Org libvorbis before 1.2.0 allows context-dependent attackers to cause a denial of service infinite loop via a crafted OGG file, aka trac Changeset 13217...

CVE-2007-5301

Buffer overflow in the vorbisstreaminfo function in input/vorbis/vorbisengine.c aka the vorbis input plugin in AlsaPlayer before 0.99.80-rc3 allows remote attackers to execute arbitrary code via a .OGG file with long comments...

CVE-2007-5301

Buffer overflow in the vorbisstreaminfo function in input/vorbis/vorbisengine.c aka the vorbis input plugin in AlsaPlayer before 0.99.80-rc3 allows remote attackers to execute arbitrary code via a .OGG file with long comments...

Buffer overflow

Buffer overflow in the vorbisstreaminfo function in input/vorbis/vorbisengine.c aka the vorbis input plugin in AlsaPlayer before 0.99.80-rc3 allows remote attackers to execute arbitrary code via a .OGG file with long comments...

CVE-2007-5301

Buffer overflow in the vorbisstreaminfo function in input/vorbis/vorbisengine.c aka the vorbis input plugin in AlsaPlayer before 0.99.80-rc3 allows remote attackers to execute arbitrary code via a .OGG file with long comments...

CVE-2007-5301

Buffer overflow in the vorbisstreaminfo function in input/vorbis/vorbisengine.c aka the vorbis input plugin in AlsaPlayer before 0.99.80-rc3 allows remote attackers to execute arbitrary code via a .OGG file with long comments...