GLSA-200808-01 : xine-lib: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200808-01 xine-lib: User-assisted execution of arbitrary code Multiple vulnerabilities have been discovered in xine-lib: Alin Rad Pop of Secunia reported an array indexing vulnerability in the sdpplinparse function in the file...

USN-635-1: xine-lib vulnerabilities

Alin Rad Pop discovered an array index vulnerability in the SDP parser. If a user or automated system were tricked into opening a malicious RTSP stream, a remote attacker may be able to execute arbitrary code with the privileges of the user invoking the program. CVE-2008-0073 Luigi Auriemma...

xine-lib: User-assisted execution of arbitrary code

Background xine-lib is the core library package for the xine media player, and other players such as Amarok, Codeine/Dragon Player and Kaffeine. Description Multiple vulnerabilities have been discovered in xine-lib: Alin Rad Pop of Secunia reported an array indexing vulnerability in the...

Design/Logic Flaw

xine-lib before 1.1.15 allows remote attackers to cause a denial of service crash via a crafted OGG file, as demonstrated by playing lol-ffplay.ogg with xine...

CVE-2008-3231

xine-lib before 1.1.15 allows remote attackers to cause a denial of service crash via a crafted OGG file, as demonstrated by playing lol-ffplay.ogg with xine...

CVE-2008-3231

xine-lib before 1.1.15 allows remote attackers to cause a denial of service crash via a crafted OGG file, as demonstrated by playing lol-ffplay.ogg with xine...

CVE-2008-3231

xine-lib before 1.1.15 allows remote attackers to cause a denial of service crash via a crafted OGG file, as demonstrated by playing lol-ffplay.ogg with xine...

CVE-2008-3231

xine-lib before 1.1.16.3 is affected by CVE-2008-3231, with a remote denial of service via crafted OGG files (as demonstrated by lol-ffplay.ogg). Multiple open-source advisories (Red Hat, Gentoo GLSA, Mandriva/OpenVAS listings) confirm remote crash scenarios triggered while parsing various media ...

CVE-2008-3231: Improper Input Validation

xine-lib before 1.1.15 allows remote attackers to cause a denial of service crash via a crafted OGG file, as demonstrated by playing lol-ffplay.ogg with xine...

libxine -- denial of service vulnerability

xine team reports: A new xine-lib version is now available. This release contains some security fixes, notably a DoS via corrupted Ogg files CVE-2008-3231, some related fixes, and fixes for a few possible buffer overflows...

xine 0.99.2 Remote Stack Overflow Exploit

No description provided by source. / $ An open security advisory 6 - Xine vcd MRL input identifier management overflow 1: Bug Researcher: c0ntexatopen-security.org 2: Bug Released: July 28th 2004 3: Bug Impact Rate: Medium / Hi 4: Bug Scope Rate: Remote / Local $ This advisory and/or proof of...

Debian Security Advisory DSA 1586-1 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory DSA 1586-1. OpenVAS Vulnerability Test $Id: deb15861.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1586-1 xine-lib Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian: Security Advisory (DSA-1586-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1586-1 : xine-lib - multiple vulnerabilities

Multiple vulnerabilities have been discovered in xine-lib, a library which supplies most of the application functionality of the xine multimedia player. The Common Vulnerabilities and Exposures project identifies the following three problems : - CVE-2008-1482 Integer overflow vulnerabilities exis...

[SECURITY] [DSA 1586-1] New xine-lib packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1586-1 [email protected] http://www.debian.org/security/ Devin Carraway May 22, 2008 http://www.debian.org/security/faq -...

DSA-1586-1 xine-lib - multiple vulnerabilities

Bulletin has no description...

SuSE 10 Security Update : xine-lib (ZYPP Patch Number 5205)

Specially crafted NSF files could potentially be exploited to execute arbitrary code. CVE-2008-1878 Specially crafted files or streams could potentially be abused to trick applications that support speex into executing arbitrary code. CVE-2008-1686 %NASLMINLEVEL 70300 C Tenable Network Security,...

openSUSE 10 Security Update : xine-devel (xine-devel-5204)

Specially crafted NSF files could potentially be exploited to execute arbitrary code CVE-2008-1878. Specially crafted files or streams could potentially be abused to trick applications that support speex into executing arbitrary code CVE-2008-1686. %NASLMINLEVEL 70300 C Tenable Network Security,...

DTSA-128-1 xine-lib - multiple vulnerabilities

Bulletin has no description...

Fedora 8 : xine-lib-1.1.12-2.fc8 (2008-3353)

Bug 442882 - CVE-2008-1878 xine-lib: buffer overflow in nsf demuxer Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...