RedHat Security Advisory RHSA-2009:0352

The remote host is missing updates announced in advisory RHSA-2009:0352. GStreamer is a streaming media framework based on graphs of filters which operate on media data. GStreamer Base Plug-ins is a collection of well-maintained base plug-ins. An integer overflow flaw which caused a heap-based...

Mandriva Update for vorbis-tools MDVA-2008:010 (vorbis-tools)

Check for the Version of vorbis-tools OpenVAS Vulnerability Test Mandriva Update for vorbis-tools MDVA-2008:010 vorbis-tools Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

gstreamer security update

CentOS Errata and Security Advisory CESA-2009:0352 Updated gstreamer-plugins-base packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GStreamer is a streaming medi...

RHEL 5 : gstreamer-plugins-base (RHSA-2009:0352)

Updated gstreamer-plugins-base packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GStreamer is a streaming media framework based on graphs of filters which operat...

Moderate: Red Hat Security Advisory: gstreamer-plugins-base security update

Updated gstreamer-plugins-base packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GStreamer is a streaming media framework based on graphs of filters which operat...

gstreamer-plugins-base: integer overflow in gst_vorbis_tag_add_coverart()

Integer overflow in the gstvorbistagaddcoverart function gst-libs/gst/tag/gstvorbistag.c in vorbistag in gst-plugins-base aka gstreamer-plugins-base before 0.10.23 in GStreamer allows context-dependent attackers to execute arbitrary code via a crafted COVERART tag that is converted from a base64...

Ubuntu: Security Advisory (USN-611-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for vorbis-tools vulnerability USN-611-2

Ubuntu Update for Linux kernel vulnerabilities USN-611-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN6112.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for vorbis-tools vulnerability USN-611-2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Buffer overflow

Buffer overflow in CDex 1.70b2 allows remote attackers to execute arbitrary code via a crafted Info header in an Ogg Vorbis .ogg file...

CVE-2009-1039

Buffer overflow in CDex 1.70b2 allows remote attackers to execute arbitrary code via a crafted Info header in an Ogg Vorbis .ogg file...

CVE-2009-1039

Buffer overflow in CDex 1.70b2 allows remote attackers to execute arbitrary code via a crafted Info header in an Ogg Vorbis .ogg file...

CVE-2009-1039

CVE-2009-1039: Buffer overflow in CDex 1.70b2 can allow remote code execution via a crafted Info header in an Ogg Vorbis (.ogg) file. Affected: CDex 1.70b2. Root cause: malformed Info header leads to overflow. No remediation details are provided in the supplied documents.

Ubuntu USN-735-1 (gst-plugins-base0.10)

The remote host is missing an update to gst-plugins-base0.10 announced via advisory USN-735-1. OpenVAS Vulnerability Test $Id: ubuntu7351.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7351.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-735-1...

CDex 1.70b2 Buffer Overflow

Tools - Media file Player - Select files - Browse to a folder - - Open - Play evil.ogg / $frgmnt1 = "OggS". //for what I understood ... beginning "\x00". //streamstructureversion "\x02". //headertypeflag "\x00\x00\x00\x00\x00\x00\x00\x00". //granularposition "\x66\x07\x00\x00"...

Ubuntu: Security Advisory (USN-735-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CDex 1.70b2 (.ogg) Local Buffer Overflow Exploit (xp/ sp3)

No description provided by source. ?PHP / CDex v1.70b2 .ogg local buffer overflow exploit poc win xp sp3 by Nine:Situations:Group::Pyrokinesis software site: http://cdexos.sourceforge.net/ our site: http://retrogod.altervista.org/ A very reliable buffer overflow exists in the way cdex process Ogg...

CDex 1.70b2 (Windows XP SP3) - '.ogg' Local Buffer Overflow

Tools - Media file Player - Select files - Browse to a folder - - Open - Play evil.ogg / $frgmnt1 = "OggS". //for what I understood ... beginning "\x00". //streamstructureversion "\x02". //headertypeflag "\x00\x00\x00\x00\x00\x00\x00\x00". //granularposition "\x66\x07\x00\x00"...

CDex 1.70b2 (.ogg) Local Buffer Overflow Exploit (xp/ sp3)

Exploit for unknown platform in category local exploits ========================================================== CDex 1.70b2 .ogg Local Buffer Overflow Exploit xp/ sp3 ========================================================== Tools - Media file Player - Select files - Browse to a folder - - Op...

USN-735-1: GStreamer Base Plugins vulnerability

It was discovered that the Base64 decoding functions in GStreamer Base Plugins did not properly handle large images in Vorbis file tags. If a user were tricked into opening a specially crafted Vorbis file, an attacker could possibly execute arbitrary code with user privileges...

CVE-2009-0586

GStreamer vulnerability CVE-2009-0586 affects gst-plugins-base prior to 0.10.23. The issue is an integer overflow in the Vorbis cover art handling (gst_vorbis_tag_add_coverart) when a COVERART tag is base64-decoded, triggering a heap-based buffer overflow. This could allow arbitrary code executio...