VLC: Multiple vulnerabilities

Background VLC is a cross-platform media player and streaming server. Description Tobias Klein reported the following vulnerabilities: A stack-based buffer overflow when processing CUE image files in modules/access/vcd/cdrom.c CVE-2008-5032. A stack-based buffer overflow when processing RealText...

FreeBSD Ports: vlc-devel

The remote host is missing an update to the system as announced in the referenced advisory. VID acf80afa-c3ef-11dd-a721-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID acf80afa-c3ef-11dd-a721-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

VLC Media Player < 0.9.8a RealMedia Processing Remote Integer Overflow (deprecated)

Binary data 4785.prm...

FreeBSD Ports: vlc-devel

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

VLC Media Player 0.9.x < 0.9.8a RealMedia Processing Remote Integer Overflow

The version of VLC media player 0.9 installed on the remote host is earlier than 0.9.8a. Such versions contain a heap-based integer buffer overflow in the Real demuxer plugin librealplugin.'. If an attacker can trick a user into opening a specially crafted RealMedia .rm file, arbitrary code could...

FreeBSD : vlc -- arbitrary code execution in the RealMedia processor (acf80afa-c3ef-11dd-a721-0030843d3802)

Tobias Klein from TrapKit reports : The VLC media player contains an integer overflow vulnerability while parsing malformed RealMedia .rm files. The vulnerability leads to a heap overflow that can be exploited by a remote attacker to execute arbitrary code in the context of VLC media player...

Integer overflow

Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote attackers to execute arbitrary code via a malformed RealMedia .rm file that triggers a heap-based buffer overflow...

CVE-2008-5276

Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote attackers to execute arbitrary code via a malformed RealMedia .rm file that triggers a heap-based buffer overflow...

DEBIAN-CVE-2008-5276

Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote attackers to execute arbitrary code via a malformed RealMedia .rm file that triggers a heap-based buffer overflow...

CVE-2008-5276

The CVE-2008-5276 issue is a RealMedia integer overflow in VLC’s ReadRealIndex function (real.c) within the Real demuxer. A malformed RealMedia (.rm) file can trigger a heap-based buffer overflow, enabling remote code execution. Affected VLC releases range from 0.9.0 to 0.9.7. Exploitation detail...

CVE-2008-5276

Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote attackers to execute arbitrary code via a malformed RealMedia .rm file that triggers a heap-based buffer overflow...

CVE-2008-5276

Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote attackers to execute arbitrary code via a malformed RealMedia .rm file that triggers a heap-based buffer overflow...

[TKADV2008-013] VLC media player RealMedia Processing Integer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: VLC media player RealMedia Processing Integer Overflow Vulnerability Advisory ID: TKADV2008-013 Revision: 1.0 Release Date: 2008/11/30 Last Modified: 2008/11/30 Date Reported: 2008/11/14 Author: Tobias Klein tk at trapkit.de Affected Softwar...

VLC media player integer overflow

Integer overflow on RealMedia .rm files parsing leads to heap buffer overflow...

vlc -- arbitrary code execution in the RealMedia processor

Tobias Klein from TrapKit reports: The VLC media player contains an integer overflow vulnerability while parsing malformed RealMedia .rm files. The vulnerability leads to a heap overflow that can be exploited by a remote attacker to execute arbitrary code in the context of VLC media player...

mplayer -- buffer overflow in the code for RealMedia RTSP streams.

The remote host is missing an update to the system as announced in the referenced advisory. VID b2ff68b2-9f29-11db-a4e4-0211d87675b7 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

mplayer & libxine -- MMS and Real RTSP buffer overflow vulnerabilities

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

mplayer -- buffer overflow in the code for RealMedia RTSP streams.

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian DSA-1586-1 : xine-lib - multiple vulnerabilities

Multiple vulnerabilities have been discovered in xine-lib, a library which supplies most of the application functionality of the xine multimedia player. The Common Vulnerabilities and Exposures project identifies the following three problems : - CVE-2008-1482 Integer overflow vulnerabilities exis...

Debian Security Advisory DSA 826-1 (helix-player)

The remote host is missing an update to helix-player announced via advisory DSA 826-1. Multiple security vulnerabilities have been identified in the helix-player media player that could allow an attacker to execute code on the victim's machine via specially crafted network resources. CVE-2005-176...