CVE-2010-4386

CVE-2010-4386 affects RealPlayer 11.x, RealPlayer SP 1.x, Linux RealPlayer 11.0.2.1744, and HelixPlayer 1.0.6 and related builds. The root cause is heap memory corruption triggered by a crafted RealMedia file, enabling remote arbitrary code execution or a denial of service. Public advisories show...

CVE-2010-4386

RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allow remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via a crafted RealMedia video file...

CVE-2010-4294

The frame decompression functionality in the VMnc media codec in VMware Movie Decoder before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548, VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548 on Windows, VMware Player 2.5.x before 2.5.5 build 246459 and 3.x...

CVE-2010-4294

The frame decompression functionality in the VMnc media codec in VMware Movie Decoder before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548, VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548 on Windows, VMware Player 2.5.x before 2.5.5 build 246459 and 3.x...

CVE-2010-4374

The inmkv plugin in Winamp before 5.6 allows remote attackers to cause a denial of service application crash via a Matroska Video MKV file containing a string with a crafted length...

CVE-2010-1523

Multiple heap-based buffer overflows in vp6.w5s aka the VP6 codec in Winamp before 5.59 Beta build 3033 might allow remote attackers to execute arbitrary code via a crafted VP6 1 video file or 2 video stream...

Heap overflow

Multiple heap-based buffer overflows in vp6.w5s aka the VP6 codec in Winamp before 5.59 Beta build 3033 might allow remote attackers to execute arbitrary code via a crafted VP6 1 video file or 2 video stream...

CVE-2010-1523

Multiple heap-based buffer overflows in vp6.w5s aka the VP6 codec in Winamp before 5.59 Beta build 3033 might allow remote attackers to execute arbitrary code via a crafted VP6 1 video file or 2 video stream...

GLSA-201006-04 : xine-lib: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201006-04 xine-lib: User-assisted execution of arbitrary code Multiple vulnerabilities have been reported in xine-lib. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user ...

DEBIAN-CVE-2009-4639

The avrescalernd function in the AVI demuxer in FFmpeg 0.5 allows remote attackers to cause a denial of service crash via a crafted AVI file that triggers a divide-by-zero error...

CVE-2009-3378

The oggplaydatahandletheoraframe function in media/liboggplay/src/liboggplay/oggplaydata.c in liboggplay, as used in Mozilla Firefox 3.5.x before 3.5.4, attempts to reuse an earlier frame data structure upon encountering a decoding error for the first frame, which allows remote attackers to cause...

Null pointer dereference

The oggplaydatahandletheoraframe function in media/liboggplay/src/liboggplay/oggplaydata.c in liboggplay, as used in Mozilla Firefox 3.5.x before 3.5.4, attempts to reuse an earlier frame data structure upon encountering a decoding error for the first frame, which allows remote attackers to cause...

CVE-2009-3378

The oggplaydatahandletheoraframe function in media/liboggplay/src/liboggplay/oggplaydata.c in liboggplay, as used in Mozilla Firefox 3.5.x before 3.5.4, attempts to reuse an earlier frame data structure upon encountering a decoding error for the first frame, which allows remote attackers to cause...

CVE-2009-3378

The CVE-2009-3378 entry concerns the oggplay_data_handle_theora_frame function in liboggplay (used by Mozilla Firefox 3.5.x). The vulnerability arises when a decoding error for the first frame occurs, causing the code to reuse an earlier frame data structure. This can allow a remote attacker to t...

VMware Products Multiple Vulnerabilities (Windows) sep09

The host is installed with VMWare products and are prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodvmwareprdtsmultvulnwinsep09.nasl 5148 2017-01-31 13:16:55Z teissa $ VMware Products Multiple Vulnerabilities Windows sep09 Authors: Antu Sanadi Copyright: Copyright c 2009...

Buffer overflow

Buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MPEG-4 video file...

CVE-2009-2203

Buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MPEG-4 video file...

CVE-2009-2203

The CVE-2009-2203 entry describes a buffer overflow in Apple QuickTime prior to 7.6.4 triggered by parsing MPEG-4 video files, which could allow remote code execution or cause a application crash/DoS. Apple released QuickTime 7.6.4 to address this issue (bounds checking improvements).

Heap overflow

Heap-based buffer overflow in the VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404, VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, and VMware ACE 2.5.x before 2.5.3 build 185404 on Windows might allow remote attacke...

CVE-2009-0199

Heap-based buffer overflow in the VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404, VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, and VMware ACE 2.5.x before 2.5.3 build 185404 on Windows might allow remote attacke...