CVE-2006-6172

CVE-2006-6172 affects Real Media input plugin RealMedia RTSP stream handler (asmrp.c) used by xine-lib and MPlayer (1.0rc1 and earlier). A buffer overflow in asmrp_eval can be triggered by a rulebook with a large number of rulematches, enabling a remote attacker to cause a denial of service and p...

CVE-2006-6172

Buffer overflow in the asmrpeval function in the RealMedia RTSP stream handler asmrp.c for Real Media input plugin, as used in 1 xine/xine-lib, 2 MPlayer 1.0rc1 and earlier, and possibly others, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a ruleboo...

CVE-2006-6172

Buffer overflow in the asmrpeval function in the RealMedia RTSP stream handler asmrp.c for Real Media input plugin, as used in 1 xine/xine-lib, 2 MPlayer 1.0rc1 and earlier, and possibly others, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a ruleboo...

RealMedia Server DoS Vulnerability

It is possible to crash a RealServer version 7 by sending a malformed HTTP request. SPDX-FileCopyrightText: 2000 John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandrake Linux Security Advisory : mplayer (MDKSA-2005:115)

Two heap overflows were discovered in mplayer's code handling the RealMedia RTSP and Microsoft Media Services streams over TCP MMST. These vulnerabilities could allow for a malicious server to execute arbitrary code on the client computer with the permissions of the user running MPlayer. The...

RealPlayer: Heap overflow vulnerability

Background RealPlayer is a multimedia player capable of handling multiple multimedia file formats. Description RealPlayer is vulnerable to a heap overflow when opening RealMedia files which make use of RealText. Impact By enticing a user to play a specially crafted RealMedia file an attacker coul...

GLSA-200507-04 : RealPlayer: Heap overflow vulnerability

The remote host is affected by the vulnerability described in GLSA-200507-04 RealPlayer: Heap overflow vulnerability RealPlayer is vulnerable to a heap overflow when opening RealMedia files which make use of RealText. Impact : By enticing a user to play a specially crafted RealMedia file an...

ashleyDoS.txt

Update: 10:38 PM 3/27/2005 Subject: " Ashley's Server DoS Exploit " Vulnerable version: Ashley's 1.0 Description: Ashley's Web Server its currently supports perl cgi. Also supported are directory listings,custom front pages, custom error pages.It also supports flash, pdf,realmedia, mp3s, avi's,...

CVE-2005-1766

Heap-based buffer overflow in rtffplin.cpp in RealPlayer 10.5 6.0.12.1056 on Windows, and 10, 10.0.1.436, and other versions before 10.0.5 on Linux, allows remote attackers to execute arbitrary code via a RealMedia file with a long RealText string, such as an SMIL file...

CVE-2005-1766

Heap-based buffer overflow in rtffplin.cpp in RealPlayer 10.5 6.0.12.1056 on Windows, and 10, 10.0.1.436, and other versions before 10.0.5 on Linux, allows remote attackers to execute arbitrary code via a RealMedia file with a long RealText string, such as an SMIL file...

[VulnWatch] iDEFENSE Security Advisory 06.23.05: RealNetworks RealPlayer RealText Parsing Heap Overflow Vulnerability

RealNetworks RealPlayer RealText Parsing Heap Overflow Vulnerability iDEFENSE Security Advisory 06.23.05 www.idefense.com/application/poi/display?id=250&type=vulnerabilities June 23, 2005 I. BACKGROUND RealPlayer is an application for playing various media formats, developed by RealNetworks Inc...

RealPlayer / RealOne Player for Windows Multiple Vulnerabilities (2005-06-23)

According to its build number, the installed version of RealPlayer / RealOne Player for Windows has several vulnerabilities : - A malicious MP3 file can be used to overwrite an arbitrary file or execute an ActiveX control. - Using a specially crafted RealMedia file, an attacker may be able to cau...

security flaw

Heap-based buffer overflow in rtffplin.cpp in RealPlayer 10.5 6.0.12.1056 on Windows, and 10, 10.0.1.436, and other versions before 10.0.5 on Linux, allows remote attackers to execute arbitrary code via a RealMedia file with a long RealText string, such as an SMIL file...

CVE-2005-1195

Multiple heap-based buffer overflows in the code used to handle 1 MMS over TCP MMST streams or 2 RealMedia RTSP streams in xine-lib before 1.0, and other products that use xine-lib such as MPlayer 1.0pre6 and earlier, allow remote malicious servers to execute arbitrary code...

CVE-2005-1195

Multiple heap-based buffer overflows in the code used to handle 1 MMS over TCP MMST streams or 2 RealMedia RTSP streams in xine-lib before 1.0, and other products that use xine-lib such as MPlayer 1.0pre6 and earlier, allow remote malicious servers to execute arbitrary code...

GLSA-200504-27 : xine-lib: Two heap overflow vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200504-27 xine-lib: Two heap overflow vulnerabilities Heap overflows have been found in the code handling RealMedia RTSP and Microsoft Media Services streams over TCP MMST. Impact : By setting up a malicious server and enticing a...

xine-lib: Two heap overflow vulnerabilities

Background xine-lib is a multimedia library which can be utilized to create multimedia frontends. Description Heap overflows have been found in the code handling RealMedia RTSP and Microsoft Media Services streams over TCP MMST. Impact By setting up a malicious server and enticing a user to use i...

CVE-2005-1195

CVE-2005-1195 affects xine-lib before 1.0 and products using it (e.g., MPlayer 1.0pre6 and earlier). Multiple heap-based buffer overflows in MMS over TCP (MMST) and RealMedia RTSP stream handling allow remote attackers to execute arbitrary code. Impact: code execution with the user’s privileges; ...

CVE-2005-1195

Multiple heap-based buffer overflows in the code used to handle 1 MMS over TCP MMST streams or 2 RealMedia RTSP streams in xine-lib before 1.0, and other products that use xine-lib such as MPlayer 1.0pre6 and earlier, allow remote malicious servers to execute arbitrary code...

GLSA-200504-19 : MPlayer: Two heap overflow vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200504-19 MPlayer: Two heap overflow vulnerabilities Heap overflows have been found in the code handling RealMedia RTSP and Microsoft Media Services streams over TCP MMST. Impact : By setting up a malicious server and enticing a...