[SECURITY] Fedora 15 Update: xmms-1.2.11-15.20071117cvs.fc15

XMMS is a multimedia Ogg Vorbis, CDs player for the X Window System with an interface similar to Winamp's. XMMS supports playlists and streaming content and has a configurable interface...

Metasploit Framework 3.7.2 Released - Download

Metasploit Framework 3.7.2 Released - Download Metasploit Framework 3.7.2 includes 698 exploit modules, 358 auxiliary modules, and 54 post modules, 11 new exploits, 1 new auxiliary module, and 15 new post modules.This release addresses several issues with updating the framework, adds 11 exploit /...

CentOS 4 : gstreamer-plugins (CESA-2011:0477)

Updated gstreamer-plugins packages that fix two security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity rating...

Design/Logic Flaw

jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8.15 allows remote attackers to sniff audio and video calls via a crafted google:jingleinfo stanza that specifies an alternate server for streamed media...

Joomla Component com_jimtawl Local File Inclusion Vulnerability

Exploit for php platform in category web applications =============================================================== Joomla Component comjimtawl Local File Inclusion Vulnerability =============================================================== Author : Maskmagicianz Date : November, 20/2010...

Design/Logic Flaw

Use-after-free vulnerability in the Media Player Network Sharing Service in Microsoft Windows Vista SP1 and SP2 and Windows 7 allows remote attackers to execute arbitrary code via a crafted Real Time Streaming Protocol RTSP packet, aka "RTSP Use After Free Vulnerability."...

CVE-2010-3225

Use-after-free vulnerability in the Media Player Network Sharing Service in Microsoft Windows Vista SP1 and SP2 and Windows 7 allows remote attackers to execute arbitrary code via a crafted Real Time Streaming Protocol RTSP packet, aka "RTSP Use After Free Vulnerability."...

MS10-075: Vulnerability in Media Player Network Sharing Service Could Allow Remote Code Execution (2281679)

A use-after-free vulnerability exists in the Microsoft Windows Media Player Network Sharing Service installed on the remote host. By sending a specially crafted Real Time Streaming Protocol RTSP packet to the affected service, a remote attacker may be able to leverage this vulnerability to execut...

Microsoft Windows Media Player Network Sharing Remote Code Execution Vulnerability (2281679)

This host is missing a critical security update according to Microsoft Bulletin MS10-075. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows OpenType Font (OTF) Format Driver CVE-2010-2741 Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. Attackers may exploit this issue to execute arbitrary code with kernel-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers. Failed exploit attempts...

PT-2010-4662 · Microsoft · Windows Media Player +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Media Player Network Sharing Service versions prior to the fixed version Description: A use-after-free issue in the Media Player Network Sharing Service allows remote attackers to execute arbitrary code via a crafted Real Ti...

RealNetworks RealPlayer Buffer Overflow (CVE-2004-0258)

RealPlayer is a media player produced by RealNetworks, Inc. that supports a variety of open and proprietary multimedia stream and file formats. Versions of RealPlayer are available for most common platforms such as Windows, Linux, Solaris, etc. There exists a buffer overflow vulnerability in...

CVE-2010-1882

Multiple buffer overflows in the MPEG Layer-3 Audio Codec for Microsoft DirectShow in l3codecx.ax in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allow remote attackers to execute arbitrary code via an MPEG Layer-3 audio stream in 1 a crafted media file or 2 crafted streaming content, aka...

Microsoft Security Bulletin MS10-055 - Critical Vulnerability in Cinepak Codec Could Allow Remote Code Execution (982665)

Microsoft Security Bulletin MS10-055 - Critical Vulnerability in Cinepak Codec Could Allow Remote Code Execution 982665 Published: August 10, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Cinepak Codec. The vulnerabilit...

Microsoft Internet Explorer 'OnPropertyChange_Src()' Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks will cause denial-of-service conditions. Technologies Affected Avaya Aura...

Microsoft Windows SMB Variable Validation Denial of Service Vulnerability

Description Microsoft Windows is prone to a denial-of-service vulnerability that affects the Microsoft Server Message Block SMB protocol software. A remote attacker can exploit this issue to stop the affected system from responding, resulting in denial-of-service conditions. Technologies Affected...

Video Streaming Feed at Black Hat Hacked

A security expert found a way to catch the talks at Black Hat for free, thanks to bugs in the video streaming service used by the security conference. Read the full article. IDG News Service...

Joomla Component com_soundset LFI Vulnerability

Exploit for php platform in category web applications =============================================== Joomla Component comsoundset LFI Vulnerability =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0...

QuickTime Streaming Server - 'parse_xml.cgi' Remote Execution (Metasploit)

$Id: qtssparsexmlexec.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Symantec AppStream / Workspace Streaming Remote Code Execution (SYM10-008)

The version of Symantec AppStream or Symantec Workspace Streaming running on the remote host has a remote code execution vulnerability. The client does not properly authenticate to the server before downloading available files. A remote attacker could exploit this by setting up a rogue Workspace...