[SECURITY] [DSA 2000-1] New ffmpeg packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2000-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 18, 2010 http://www.debian.org/security/faq -...

CVE-2010-0364

Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg file with a crafted Advanced SubStation Alpha Subtitle .ass file, probably involving the Dialogue field...

CVE-2010-0364

Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg file with a crafted Advanced SubStation Alpha Subtitle .ass file, probably involving the Dialogue field...

CVE-2010-0364

VLC Media Player 0.8.6 is affected by a stack-based buffer overflow when processing an ogg file containing a crafted Advanced SubStation Alpha Subtitle (.ass) file, likely in the Dialogue field. This allows user-assisted remote code execution. Multiple security feeds (OpenVAS and NVD) corroborate...

CVE-2010-0364

Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg file with a crafted Advanced SubStation Alpha Subtitle .ass file, probably involving the Dialogue field...

Mandriva Security Advisory MDVSA-2009:335 (ffmpeg)

The remote host is missing an update to ffmpeg announced via advisory MDVSA-2009:335. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandriva Security Advisory MDVSA-2009:335 (ffmpeg)

The remote host is missing an update to ffmpeg announced via advisory MDVSA-2009:335. OpenVAS Vulnerability Test $Id: mdksa2009335.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:335 ffmpeg Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

Fedora Core 10 FEDORA-2009-11499 (libsndfile)

The remote host is missing an update to libsndfile announced via advisory FEDORA-2009-11499. OpenVAS Vulnerability Test $Id: fcore200911499.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-11499 libsndfile Authors: Thomas Reinke Copyright: Copyright ...

Mandriva Security Advisory MDVSA-2009:319 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory MDVSA-2009:319. OpenVAS Vulnerability Test $Id: mdksa2009319.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:319 xine-lib Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...

Fedora Core 10 FEDORA-2009-11499 (libsndfile)

The remote host is missing an update to libsndfile announced via advisory FEDORA-2009-11499. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

Fedora Core 11 FEDORA-2009-11618 (libsndfile)

The remote host is missing an update to libsndfile announced via advisory FEDORA-2009-11618. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

Fedora 11 : libsndfile-1.0.20-3.fc11 (2009-11618)

Version 1.0.20 2009-03-14 Fix potential heap overflow in VOC file parser Tobias Klein, http://www.trapkit.de/. Version 1.0.19 2009-03-02 Fix for CVE-2009-0186 Alin Rad Pop, Secunia Research. Huge number of minor bug fixes as a result of static analysis. Version 1.0.18 2009-02-07 Add Ogg/Vorbis...

Fedora 10 : libsndfile-1.0.20-3.fc10 (2009-11499)

Version 1.0.20 2009-03-14 Fix potential heap overflow in VOC file parser Tobias Klein, http://www.trapkit.de/. Version 1.0.19 2009-03-02 Fix for CVE-2009-0186 Alin Rad Pop, Secunia Research. Huge number of minor bug fixes as a result of static analysis. Version 1.0.18 2009-02-07 Add Ogg/Vorbis...

[USN-861-1] libvorbis vulnerabilities

=========================================================== Ubuntu Security Notice USN-861-1 November 24, 2009 libvorbis vulnerabilities CVE-2008-2009, CVE-2009-3379 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 8.04 LTS...

libvorbis library multiple security vulnerabilities

Multiple vulnerabilities on ogg files parsing...

USN-861-1: libvorbis vulnerabilities

It was discovered that libvorbis did not correctly handle ogg files with underpopulated Huffman trees. If a user were tricked into opening a specially crafted ogg file with an application that uses libvorbis, an attacker could cause a denial of service. CVE-2008-2009 It was discovered that...

RedHat Security Advisory RHSA-2009:1561

The remote host is missing updates announced in advisory RHSA-2009:1561. The libvorbis packages contain runtime libraries for use in programs that support Ogg Vorbis. Ogg Vorbis is a fully open, non-proprietary, patent-and royalty-free, general-purpose compressed audio format. Multiple flaws were...

RedHat Security Advisory RHSA-2009:1561

The remote host is missing updates announced in advisory RHSA-2009:1561. The libvorbis packages contain runtime libraries for use in programs that support Ogg Vorbis. Ogg Vorbis is a fully open, non-proprietary, patent-and royalty-free, general-purpose compressed audio format. Multiple flaws were...

[SECURITY] Fedora 11 Update: libvorbis-1.2.0-9.fc11

Ogg Vorbis is a fully open, non-proprietary, patent- and royalty-free, general-purpose compressed audio format for audio and music at fixed and variable bitrates from 16 to 128 kbps/channel. The libvorbis package contains runtime libraries for use in programs that support Ogg Vorbis...

RHEL 3 / 4 / 5 : libvorbis (RHSA-2009:1561)

Updated libvorbis packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The libvorbis packages contain runtime libraries for use in programs that...