GLSA-200405-24 : MPlayer, xine-lib: vulnerabilities in RTSP stream handling

The remote host is affected by the vulnerability described in GLSA-200405-24 MPlayer, xine-lib: vulnerabilities in RTSP stream handling Multiple vulnerabilities have been found and fixed in the RTSP handling code common to recent versions of these two packages. These vulnerabilities include sever...

CVE-2004-0433

Multiple buffer overflows in the Real-Time Streaming Protocol RTSP client for 1 MPlayer before 1.0pre4 and 2 xine lib xine-lib before 1-rc4, when playing Real RTSP realrtsp streams, allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long URLs, b lo...

MPlayer, xine-lib: vulnerabilities in RTSP stream handling

Background MPlayer is a movie player capable of handling multiple multimedia file formats. xine-lib is a multimedia player library used by several graphical user interfaces, including xine-ui. They both use the same code to handle Real-Time Streaming Protocol RTSP streams from RealNetworks server...

libxine -- multiple buffer overflows in RTSP

A xine security announcement states: Multiple vulnerabilities have been found and fixed in the Real-Time Streaming Protocol RTSP client for RealNetworks servers, including a series of potentially remotely exploitable buffer overflows. This is a joint advisory by the MPlayer and xine teams as the...

CVE-2004-0433

CVE-2004-0433: Multiple buffer overflows in the RTSP client handling of RealRTSP streams affect MPlayer (before 1.0pre4) and xine-lib (before 1-rc4). The flaws enable denial of service (crash) and potentially arbitrary code execution via long URLs, long Real server responses, or long RDT packets....

xine-lib update

New xine-lib packages are available for Slackware 9.1 and -current to fix a security issue where playing a specially crafted Real RTSP stream could run malicious code as the user playing the stream. More details about this issue may be found in this advisory:...

MPlayer/xine buffer overflow

Buffer overflow on parsing RTSP protocol...

[UNIX] Remote Buffer Overflow Vulnerabilities in Real RTSP Streaming

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Real Networks Helix Universal Server 9.0.x - Denial of Service

source: https://www.securityfocus.com/bid/10157/info It has been reported that Real Networks Helix Universal Server is affected by a remote denial of service vulnerability. This issue is due to a failure of the application to properly handle malformed RTSP Real-Time Streaming Protocol requests. A...

Real Networks Helix Universal Server 9.0.x - Denial of Service

Real Networks Helix Universal Server 9.0.x - Denial of Service source: https://www.securityfocus.com/bid/10157/info It has been reported that Real Networks Helix Universal Server is affected by a remote denial of service vulnerability. This issue is due to a failure of the application to properly...

CVE-2003-0725

Buffer overflow in the RTSP protocol parser for the View Source plug-in vsrcplin.so or vsrcplin3260.dll for RealNetworks Helix Universal Server 9 and RealSystem Server 8, 7 and RealServer G2 allows remote attackers to execute arbitrary code...

CVE-2003-0725

The CVE-2003-0725 entry refers to a buffer overflow in the RTSP protocol parser of the View Source plug-in (vsrcplin.so/vsrcplin3260.dll) used by RealNetworks Helix Universal Server 9 and RealSystem Server 8, 7, and RealServer G2. Public sources (OpenVAS/NASL) describe a vulnerable condition in R...

CVE-2003-0725

Buffer overflow in the RTSP protocol parser for the View Source plug-in vsrcplin.so or vsrcplin3260.dll for RealNetworks Helix Universal Server 9 and RealSystem Server 8, 7 and RealServer G2 allows remote attackers to execute arbitrary code...

RealNetworks media server RTSP protocol parser buffer overflow

Overview RealNetworks Helix Universal Server 9 media servers contain a buffer overflow in a RTSP protocol parser. Earlier versions of their media servers are also affected: RealSystem Server 7, 8, and RealServer G2. Description RealNetworks Helix Universal Server 9 media server is software which...

Helix Servers View Source Plug-in RTSP Parser Overflow

The remote host is running RealServer or Helix Universal Server, media streaming servers. According to its banner, the version of the server installed on the remote host may be affected by a buffer overflow vulnerability when handling URLs with many '/' characters and another when handling...

RealNetworks Helix Universal Server vulnerable to buffer overflow when supplied an overly long string for the "Describe" field

Overview The RealNetworks' Helix Universal Server supports delivery of several different media types over the Internet via RTSP Real Time Streaming Protocol. Vulnerabilities have been discovered in the way it handles some RTSP requests. These vulnerabilities could allow a remote attacker to execu...

RealNetworks Helix Universal Server vulnerable to buffer overflow when supplied an overly long string within the "Transport" field of a SETUP RTSP request

Overview The RealNetworks' Helix Universal Server supports delivery of several different media types via RTSP Real Time Streaming Protocol. Vulnerabilities have been discovered in the way it handles some RTSP requests. These vulnerabilities could allow a remote attacker to execute arbitrary code ...

CVE-2003-0054

Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute certain code via a request to port 7070 with the script in an argument to the rtsp DESCRIBE method, which is inserted into a log file and executed when the log is viewed usin...

RealNetworks HELIX buffer overflow

Buffer overflow in RTSP SETUP and DESCRIBE commands...

CVE-2002-1321

The CVE-2002-1321 entry concerns RealNetworks products RealOne and RealPlayer, where multiple buffer overflows can allow remote code execution. The root causes are: (1) a SMIL file with an excessively long parameter, (2) a long filename in an rtsp:// request (e.g., from a .m3u file), and (3) cert...