xine-lib buffer overflow

Buffer overflow on parsing Real streaming protocol...

[SECURITY] [DSA 1244-1] New xine-lib packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1244-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 28th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1244-1] New xine-lib packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1244-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 28th, 2006 http://www.debian.org/security/faq -...

DSA-1244-1 xine-lib

Bulletin has no description...

[slackware-security] xine-lib

New xine-lib packages are available for Slackware 9.1, 10.0, 10.1, 10.2, and 11.0 to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2006-2200 Here are the details from the Slackware 11.0...

GLSA-200612-02 : xine-lib: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200612-02 xine-lib: Buffer overflow A possible buffer overflow has been reported in the Real Media input plugin. Impact : An attacker could exploit this vulnerability by enticing a user into loading a specially crafted stream with...

xine-lib: Buffer overflow

Background xine is a portable and reusable multimedia playback engine. xine-lib is xine's core engine. Description A possible buffer overflow has been reported in the Real Media input plugin. Impact An attacker could exploit this vulnerability by enticing a user into loading a specially crafted...

Xine-Lib RuleMatches远程缓冲区溢出漏洞

xine是一款免费的媒体播放器，支持多种格式。 xine的Real Media输入插件的asmrpmatch函数中存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 在以下代码段中，rulematches是仅能容纳16个int的静态缓冲区，但asmrpmatch没有对参数执行边界检查： 8--------------------------------------------8 src/input/libreal/real.c:468 for i=0; idesc-streamcount; i++ int j=0; int n; char b64; int...

MiMMS媒体流处理远程栈溢出漏洞

MiMMS是一款使用MMS协议下载并保存流媒体的程序。 MiMMS在处理畸形的数据时，远程攻击者可能利用此漏洞在用用户机器上执行任意指令。 MiMMS的getheader和getmediapacket函数在从服务器读取数据时存在栈溢出漏洞。如果用户受骗连接到了恶意的服务器的话，就会触发这个漏洞，导致执行任意代码。 xine xine-lib 1.1.0 xine xine-lib 1.0.1 xine xine-lib 1.0 MiMMS MiMMS 0.0.9 厂商补丁： Gentoo ------ Gentoo已经为此发布了一个安全公告（GLSA-200607-07）以及相应补丁:...

CVE-2006-6172

Buffer overflow in the asmrpeval function in the RealMedia RTSP stream handler asmrp.c for Real Media input plugin, as used in 1 xine/xine-lib, 2 MPlayer 1.0rc1 and earlier, and possibly others, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a ruleboo...

CVE-2006-6172: Undefined Security Weakness

Buffer overflow in the asmrpeval function in the RealMedia RTSP stream handler asmrp.c for Real Media input plugin, as used in 1 xine/xine-lib, 2 MPlayer 1.0rc1 and earlier, and possibly others, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a ruleboo...

Debian DSA-1215-1 : xine-lib - several vulnerabilities

Several remote vulnerabilities have been discovered in the Xine multimedia library, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-4799 The XFocus Security Team discovered that insufficient...

[SECURITY] [DSA 1215-1] New xine-lib packages fix execution of arbitrary code

-------------------------------------------------------------------------- Debian Security Advisory DSA 1215-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 20th, 2006 http://www.debian.org/security/faq -...

DSA-1215-1 xine-lib

Bulletin has no description...

DSA-1215 xine-lib

Bulletin has no description...

Debian DSA-1005-1 : xine-lib - buffer overflow

Simon Kilvington discovered that specially crafted PNG images can trigger a heap overflow in libavcodec, the multimedia library of ffmpeg, which may lead to the execution of arbitrary code. xine-lib includes a local copy of libavcodec. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Debian DSA-1105-1 : xine-lib - buffer overflow

Federico L. Bossi Bonin discovered a buffer overflow in the HTTP Plugin in xine-lib, the xine video/media player library, that could allow a remote attacker to cause a denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...

Debian DSA-1093-1 : xine - format string

Several format string vulnerabilities have been discovered in xine-ui, the user interface of the xine video player, which may cause a denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

GLSA-200609-08 : xine-lib: Buffer overflows

The remote host is affected by the vulnerability described in GLSA-200609-08 xine-lib: Buffer overflows xine-lib contains buffer overflows in the processing of AVI. Additionally, xine-lib is vulnerable to a buffer overflow in the HTTP plugin xinepluginphttp.so via a long reply from an HTTP server...

CVE-2006-4799

Buffer overflow in ffmpeg for xine-lib before 1.1.2 might allow context-dependent attackers to execute arbitrary code via a crafted AVI file and "bad indexes", a different vulnerability than CVE-2005-4048 and CVE-2006-2802...