CVE-2008-0295

Heap-based buffer overflow in modules/access/rtsp/realsdpplin.c in the Xine library, as used in VideoLAN VLC Media Player 0.8.6d and earlier, allows user-assisted remote attackers to cause a denial of service crash or execute arbitrary code via long Session Description Protocol SDP data...

CVE-2008-0238

Multiple heap-based buffer overflows in the rmffdumpcont function in input/libreal/rmff.c in xine-lib 1.1.9 allow remote attackers to execute arbitrary code via the SDP 1 Title, 2 Author, or 3 Copyright attribute, related to the rmffdumpheader function, different vectors than CVE-2008-0225. NOTE:...

Heap overflow

Multiple heap-based buffer overflows in the rmffdumpcont function in input/libreal/rmff.c in xine-lib 1.1.9 allow remote attackers to execute arbitrary code via the SDP 1 Title, 2 Author, or 3 Copyright attribute, related to the rmffdumpheader function, different vectors than CVE-2008-0225. NOTE:...

CVE-2008-0238

Multiple heap-based buffer overflows in the rmffdumpcont function in input/libreal/rmff.c in xine-lib 1.1.9 allow remote attackers to execute arbitrary code via the SDP 1 Title, 2 Author, or 3 Copyright attribute, related to the rmffdumpheader function, different vectors than CVE-2008-0225. NOTE:...

CVE-2008-0225

Heap-based buffer overflow in the rmffdumpcont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows remote attackers to execute arbitrary code via the SDP Abstract attribute in an RTSP session, related to the rmffdumpheader function and related to disregarding the max field. NOTE...

CVE-2008-0225

Heap-based buffer overflow in the rmffdumpcont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows remote attackers to execute arbitrary code via the SDP Abstract attribute in an RTSP session, related to the rmffdumpheader function and related to disregarding the max field. NOTE...

Heap overflow

Heap-based buffer overflow in the rmffdumpcont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows remote attackers to execute arbitrary code via the SDP Abstract attribute in an RTSP session, related to the rmffdumpheader function and related to disregarding the max field. NOTE...

CVE-2008-0225

CVE-2008-0225 is a vulnerability in xine-lib up to version 1.1.9 where a heap-based buffer overflow in rmff_dump_cont (rmff.c) can be triggered via the SDP Abstract attribute in an RTSP session. The root cause is the code path that disregards the max field in rmff_dump_header, leading to potentia...

Xine-Lib 1.1.9 - rmff_dump_cont() Remote Heap Buffer Overflow (PoC)

Xine-Lib 1.1.9 - rmffdumpcont Remote Heap Buffer Overflow PoC source: https://www.securityfocus.com/bid/27198/info The xine-lib library is prone to a remote heap-based buffer-overflow vulnerability. This issue occurs because the software fails to perform adequate boundary checks on user-supplied...

WireShark sniffer multiple security vulnerabilities

Buffer overflow on SSL parsing, DoS on HTTP, MEGACO, Bluetooth SDP, RPC parsing...

[SECURITY] [DSA 1414-1] New wireshark packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1414-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 27, 2007 http://www.debian.org/security/faq -...

Debian DSA-1414-1 : wireshark - several vulnerabilities

Several remote vulnerabilities have been discovered in the Wireshark network traffic analyzer, which may lead to denial of service or execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-6114 Stefan Esser discovered a buffer...

[SECURITY] [DSA 1414-1] New wireshark packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1414-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 27, 2007 http://www.debian.org/security/faq -...

DSA-1414-1 wireshark - several vulnerabilities

Bulletin has no description...

Wireshark 0.99.6版本多个远程拒绝服务漏洞

BUGTRAQ ID: 26532 Wireshark以前名为Ethereal，是一款非常流行的网络协议分析工具。 Wireshark的以下协议处理模块中存在多个死循环、内存耗尽、崩溃或缓冲器溢出漏洞： SSL、ANSI MAP、Firebird/Interbase、NCP、HTTP、MEGACO、DCP ETSI、PPP和蓝牙SDP处理模块 处理畸形的MP3或iSeries（OS/400）通讯追踪文件 处理畸形的DNP或RPC端口映射报文 如果Wireshark受骗从网络抓包或通过抓包文件解析了上述畸形报文的话，就会耗尽大量系统资源。 Wireshark Wireshark 0.8.1...

CVE-2007-6120

The Bluetooth SDP dissector Wireshark formerly Ethereal 0.99.2 to 0.99.6 allows remote attackers to cause a denial of service infinite loop via unknown vectors...

CVE-2007-6120

The Bluetooth SDP dissector Wireshark formerly Ethereal 0.99.2 to 0.99.6 allows remote attackers to cause a denial of service infinite loop via unknown vectors...

CVE-2007-6120

The Bluetooth SDP dissector Wireshark formerly Ethereal 0.99.2 to 0.99.6 allows remote attackers to cause a denial of service infinite loop via unknown vectors...

CVE-2007-6120

CVE-2007-6120 affects Wireshark (formerly Ethereal) Bluetooth SDP dissector, enabling remote denial of service via infinite loop in versions 0.99.2–0.99.6. Connected advisories confirm the vulnerability in the Bluetooth SDP parser and related DoS concerns; upgrade to Wireshark 0.99.7 (or later) t...

CVE-2007-6120

The Bluetooth SDP dissector Wireshark formerly Ethereal 0.99.2 to 0.99.6 allows remote attackers to cause a denial of service infinite loop via unknown vectors...