CVE-2008-2253

Unspecified vulnerability in Microsoft Windows Media Player 11 allows remote attackers to execute arbitrary code via a crafted audio-only file that is streamed from a Server-Side Playlist SSPL on Windows Media Server, aka "Windows Media Player Sampling Rate Vulnerability."...

FreeBSD Ports: DarwinStreamingServer

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian DSA-1583-1 : gnome-peercast - buffer overflow

Several remote vulnerabilities have been discovered in GNOME PeerCast, the GNOME interface to PeerCast, a P2P audio and video streaming server. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-6454 Luigi Auriemma discovered that PeerCast is vulnerabl...

[SECURITY] [DSA 1582-1] New peercast packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1582-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 20, 2008 http://www.debian.org/security/faq -...

DSA-1583-1 gnome-peercast - several vulnerabilities

Bulletin has no description...

[SECURITY] Fedora 7 Update: xine-lib-1.1.11.1-1.fc7.2

This package contains the Xine library. Xine is a free multimedia player. It can play back various media. It also decodes multimedia files from local disk drives, and displays multimedia streamed over the Internet. It interprets many of the most common multimedia formats available - and some of t...

VLC: User-assisted execution of arbitrary code

Background VLC is a cross-platform media player and streaming server. Description Multiple vulnerabilities were found in VLC: Luigi Auriemma discovered that the stack-based buffer overflow when reading subtitles, which has been reported as CVE-2007-6681 in GLSA 200803-13, was not properly fixed...

[SECURITY] Fedora 7 Update: speex-1.2-0.3.beta1

Speex is a patent-free compression format designed especially for speech. It is specialized for voice communications at low bit-rates in the 2-45 kbps range. Possible applications include Voice over IP VoIP, Internet audio streaming, audio books, and archiving of speech data e.g. voice mail...

[SECURITY] Fedora 8 Update: xine-lib-1.1.11.1-1.fc8

This package contains the Xine library. Xine is a free multimedia player. It can play back various media. It also decodes multimedia files from local disk drives, and displays multimedia streamed over the Internet. It interprets many of the most common multimedia formats available - and some of t...

Integer overflow

Uncontrolled array index in the sdpplinparse function in stream/realrtsp/sdpplin.c in MPlayer 1.0 rc2 allows remote attackers to overwrite memory and execute arbitrary code via a large streamid SDP parameter. NOTE: this issue has been referred to as an integer overflow...

[SECURITY] Fedora 8 Update: xine-lib-1.1.11-1.fc8

This package contains the Xine library. Xine is a free multimedia player. It can play back various media. It also decodes multimedia files from local disk drives, and displays multimedia streamed over the Internet. It interprets many of the most common multimedia formats available - and some of t...

KiSS PC-Link Server Detection (TCP)

The remote service is a PC-Link Server, used for streaming videos, music, and pictures to a KiSS player. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid31464; scriptversion"1.8";...

KiSS PC-Link Server Detection (UDP)

The remote service is a PC-Link Server, used for streaming videos, music, and pictures to a KiSS player, and this port is used by a player when searching for a PC-Link server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid31465; scriptversion"1.8";...

LIVE555 Media Server: Denial of service

Background LIVE555 Media Server is a set of libraries for multimedia streaming. Description Luigi Auriemma reported a signedness error in the parseRTSPRequestString function when processing short RTSP queries. Impact A remote attacker could send a specially crafted RTSP query to the vulnerable...

Move Media Player qsp2ie07074039.dll ActiveX控件栈溢出漏洞

BUGTRAQ ID: 27995 Move Media Player是一款网络流媒体播放器。 Move Media Player的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 Move Media Player所安装的Quantum Streaming IE Player ActiveX控件（qsp2ie07074039.dll）没有正确地验证对UploadLogs方式的输入参数。如果用户受骗访问了恶意网页并向该方式传送了超长URL参数的话，就可能触发栈溢出，导致执行任意指令。 Move Networks qsp2ie07074039.dll...

CVE-2008-1044

Stack-based buffer overflow in the Quantum Streaming Player Quantum Streaming IE Player ActiveX control aka QSP2IE.QSP2IE in qsp2ie07076007.dll 7.7.6.7 and qsp2ie07074039.dll 7.7.4.39 in Move Media Player allows remote attackers to execute arbitrary code via a long argument to the UploadLogs...

Stack overflow

Stack-based buffer overflow in the Quantum Streaming Player Quantum Streaming IE Player ActiveX control aka QSP2IE.QSP2IE in qsp2ie07076007.dll 7.7.6.7 and qsp2ie07074039.dll 7.7.4.39 in Move Media Player allows remote attackers to execute arbitrary code via a long argument to the UploadLogs...

CVE-2008-1044

Stack-based buffer overflow in the Quantum Streaming Player Quantum Streaming IE Player ActiveX control aka QSP2IE.QSP2IE in qsp2ie07076007.dll 7.7.6.7 and qsp2ie07074039.dll 7.7.4.39 in Move Media Player allows remote attackers to execute arbitrary code via a long argument to the UploadLogs...

CVE-2008-1044

The CVE-2008-1044 vulnerability is a stack-based buffer overflow in Move Media Player’s Quantum Streaming Player ActiveX control (QSP2IE.QSP2IE) used by Move Media Player. It occurs in the qsp2ie07076007.dll (7.7.6.7) and qsp2ie07074039.dll (7.7.4.39) when processing a long argument to the Upload...

CVE-2008-1044: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the Quantum Streaming Player Quantum Streaming IE Player ActiveX control aka QSP2IE.QSP2IE in qsp2ie07076007.dll 7.7.6.7 and qsp2ie07074039.dll 7.7.4.39 in Move Media Player allows remote attackers to execute arbitrary code via a long argument to the UploadLogs...