Lucene search
+L

1349 matches found

Saint
Saint
added 2008/03/18 12:0 a.m.46 views

RealNetworks Helix Server RTSP Proxy-Require heap overflow

Added: 03/18/2008 CVE: CVE-2008-5911 BID: 33059 Background RealNetworks Helix Server is a media server supporting multiple formats and platforms. Problem A heap overflow vulnerability allows remote attackers to execute arbitrary commands by sending a long, specially crafted Proxy-Require header i...

10CVSS7.6AI score0.06185EPSS
SaveExploits4
Saint
Saint
added 2008/03/18 12:0 a.m.27 views

RealNetworks Helix Server RTSP Proxy-Require heap overflow

Added: 03/18/2008 CVE: CVE-2008-5911 BID: 33059 Background RealNetworks Helix Server is a media server supporting multiple formats and platforms. Problem A heap overflow vulnerability allows remote attackers to execute arbitrary commands by sending a long, specially crafted Proxy-Require header i...

10CVSS7.6AI score0.06185EPSS
SaveExploits4
Tenable Nessus
Tenable Nessus
added 2008/03/17 12:0 a.m.20 views

GLSA-200803-22 : LIVE555 Media Server: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200803-22 LIVE555 Media Server: Denial of Service Luigi Auriemma reported a signedness error in the parseRTSPRequestString function when processing short RTSP queries. Impact : A remote attacker could send a specially crafted RTSP...

7.1CVSS5.5AI score0.04412EPSS
SaveExploits2References2
Gentoo Linux
Gentoo Linux
added 2008/03/13 12:0 a.m.38 views

LIVE555 Media Server: Denial of service

Background LIVE555 Media Server is a set of libraries for multimedia streaming. Description Luigi Auriemma reported a signedness error in the parseRTSPRequestString function when processing short RTSP queries. Impact A remote attacker could send a specially crafted RTSP query to the vulnerable...

7.1CVSS6.3AI score0.04412EPSS
SaveExploits2
seebug.org
seebug.org
added 2008/02/27 12:0 a.m.23 views

D-Link MPEG4 SHM Audio Control (VAPGDecoder.dll 1.7.0.5) BOF Exploit

No description provided by source. !-- D-Link MPEG4 SHM Audio Control VAPGDecoder.dll 1.7.0.5 remote overflow exploit Internet Explorer 7/XP SP2 check a live camera demonstration here with DCS-5300 camera series: http://www.dlink.com/products/liveDemo/...

7.1AI score
SaveExploits0
zdt
zdt
added 2008/02/26 12:0 a.m.45 views

D-Link MPEG4 SHM Audio Control (VAPGDecoder.dll 1.7.0.5) BOF Exploit

Exploit for unknown platform in category remote exploits ==================================================================== D-Link MPEG4 SHM Audio Control VAPGDecoder.dll 1.7.0.5 BOF Exploit ==================================================================== //add su one, user: sun pass: tzu...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2008/02/26 12:0 a.m.27 views

dlink-overflow.txt

//add su one, user: sun pass: tzu shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" + "%u4142%u4230%u5841%u3850%u4241%u6d75%u6b39%u494c" +...

7.4AI score
SaveExploits0
exploitpack
exploitpack
added 2008/02/26 12:0 a.m.22 views

D-Link MPEG4 SHM Audio Control - VAPGDecoder.dll 1.7.0.5 Remote Buffer Overflow

D-Link MPEG4 SHM Audio Control - VAPGDecoder.dll 1.7.0.5 Remote Buffer Overflow //add su one, user: sun pass: tzu shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" +...

1.7AI score
SaveExploits0
Exploit DB
Exploit DB
added 2008/02/26 12:0 a.m.35 views

D-Link MPEG4 SHM Audio Control - 'VAPGDecoder.dll 1.7.0.5' Remote Buffer Overflow

//add su one, user: sun pass: tzu shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" + "%u4142%u4230%u5841%u3850%u4241%u6d75%u6b39%u494c" +...

9.3CVSS5.8AI score0.07141EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2008/02/07 12:0 a.m.19 views

QuickTime < 7.4.1 RTSP Response Handling Overflow

Binary data 4363.prm...

9.3CVSS7.3AI score0.12405EPSS
SaveExploits3References4
Tenable Nessus
Tenable Nessus
added 2008/02/07 12:0 a.m.23 views

QuickTime < 7.4.1 RTSP Response Long Reason-Phrase Arbitrary Remote Code Execution (Windows)

The version of QuickTime installed on the remote Windows host is older than 7.4.1. Such versions contain a heap-based buffer overflow in the application's handling of HTTP responses when RTSP tunneling is enabled. If an attacker can trick a user into visiting a specially crafted webpage, arbitrar...

9.3CVSS6.3AI score0.12405EPSS
SaveExploits3References4
OpenVAS
OpenVAS
added 2008/01/31 12:0 a.m.35 views

Debian Security Advisory DSA 1472-1 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory DSA 1472-1. OpenVAS Vulnerability Test $Id: deb14721.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1472-1 xine-lib Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

6.4CVSS0.3AI score0.14969EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2008/01/29 12:0 a.m.31 views

GLSA-200801-12 : xine-lib: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200801-12 xine-lib: User-assisted execution of arbitrary code Luigi Auriemma reported that xine-lib does not properly check boundaries when processing SDP attributes of RTSP streams, leading to heap-based buffer overflows. Impact ...

7.5CVSS6.3AI score0.14969EPSS
SaveExploits2References3
Gentoo Linux
Gentoo Linux
added 2008/01/27 12:0 a.m.37 views

xine-lib: User-assisted execution of arbitrary code

Background xine-lib is the core library package for the xine media player. Description Luigi Auriemma reported that xine-lib does not properly check boundaries when processing SDP attributes of RTSP streams, leading to heap-based buffer overflows. Impact An attacker could entice a user to play...

7.5CVSS7AI score0.14969EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2008/01/27 12:0 a.m.38 views

Debian DSA-1472-1 : xine-lib - buffer overflow

Luigi Auriemma discovered that the Xine media player library performed insufficient input sanitising during the handling of RTSP streams, which could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

6.4CVSS5.8AI score0.14969EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
added 2008/01/27 12:0 a.m.37 views

SuSE 10 Security Update : xine (ZYPP Patch Number 4926)

Specially crafted rtsp-Streams could cause a buffer overflow in xine. Attackers could potentially exploit that to execute arbitrary code. CVE-2008-0225 Additionally a security update of xorg-x11 revealed a bug in xine-ui. The xine user interface didn't display properly due to that. %NASLMINLEVEL...

6.4CVSS7.5AI score0.14969EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
added 2008/01/27 12:0 a.m.29 views

openSUSE 10 Security Update : xine-devel (xine-devel-4917)

Specially crafted rtsp-Streams could cause a buffer overflow in xine. Attackers could potentially exploit that to execute arbitrary code CVE-2008-0225. Additionally a security update of xorg-x11 revealed a bug in xine-ui. The xine user interface didn't display properly due to that. %NASLMINLEVEL...

6.4CVSS6.2AI score0.14969EPSS
SaveExploits2References1
securityvulns
securityvulns
added 2008/01/21 12:0 a.m.53 views

[SECURITY] [DSA 1472-1] New xine-lib packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1472-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 21, 2008 http://www.debian.org/security/faq -...

6.4CVSS0.3AI score0.14969EPSS
SaveExploits2
NVD
NVD
added 2008/01/17 1:0 a.m.21 views

CVE-2007-6684

The RTSP module in VideoLAN VLC 0.8.6d allows remote attackers to cause a denial of service crash via a request without a Transport parameter, which triggers a NULL pointer dereference...

5CVSS6.4AI score0.02234EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2008/01/17 1:0 a.m.4 views

CVE-2007-6684

The RTSP module in VideoLAN VLC 0.8.6d allows remote attackers to cause a denial of service crash via a request without a Transport parameter, which triggers a NULL pointer dereference...

5CVSS5.5AI score0.02234EPSS
SaveExploits0References6
Rows per page
Query Builder