Slackware 10.0 / 10.1 / 10.2 / 11.0 / 9.1 : xine-lib (SSA:2006-357-05)

New xine-lib packages are available for Slackware 9.1, 10.0, 10.1, 10.2, and 11.0 to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2006-357-05. The text itself is...

SUSE-SA:2007:013: xine-ui,xine-lib,xine-extra,xine-devel

The remote host is missing the patch for the advisory SUSE-SA:2007:013 xine-ui,xine-lib,xine-extra,xine-devel. This update fixes several format string bugs that can be exploited remotely with user-assistance to execute arbitrary code. Since SUSE Linux version 10.1 format string bugs are not...

Mandrake Linux Security Advisory : xine-lib (MDKSA-2006:176)

Xine-lib uses an embedded copy of ffmpeg and as such has been updated to address the following issue: Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9p20060530 allow remote attackers to cause a denial of service or possibly execute arbitrary code via multiple unspecified vectors in ...

libxine -- buffer overflow vulnerability

xine Team reports: A new xine-lib version is now available. This release contains a security fix array index vulnerability which may lead to a stack buffer overflow...

Xine M3U远程格式串漏洞

Xine是一款开放源代码的媒体处理程序。 Xine处理.m3u文件存在格式串问题，远程攻击者可以利用漏洞以应用程序执行任意指令。 构建恶意.m3u文件，会导致VLC播放程序处理时崩溃，导致任意指令执行。 xine xine-ui 0.99.4 xine xine-ui 0 MandrakeSoft Linux Mandrake 2007.0 x8664 MandrakeSoft Linux Mandrake 2007.0 MandrakeSoft Corporate Server 3.0 x8664 MandrakeSoft Corporate Server 3.0...

GLSA-200701-18 : xine-ui: Format string vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200701-18 xine-ui: Format string vulnerabilities Due to the improper handling and use of format strings, the errorscreatewindow function in errors.c does not safely write data to memory. Impact : An attacker could entice a user to...

Xine-ui format string Vulnerabilties.

there iz a fmt string vuln in xine-ui specifically in errors.c func errorscreatewindow that can be used to maliciously execuute arbitary code...

xine-ui: Format string vulnerabilities

Background xine-ui is a skin-based user interface for xine. xine is a free multimedia player. It plays CDs, DVDs, and VCDs, and can also decode other common multimedia formats. Description Due to the improper handling and use of format strings, the errorscreatewindow function in errors.c does not...

Xine errors.c远程格式串处理漏洞

xine是一款免费的媒体播放器，支持多种格式。 xine-ui的errors.c文件中errorscreatewindow函数存在格式串处理漏洞，如果用户受骗打开了恶意的播放列表文件的话就可能触发这个漏洞，导致执行任意代码。 xine xine-ui 0.99.4 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://xine.cvs.sourceforge.net/xine/xine-ui/...

Format string

XINE 0.99.4 allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a certain M3U file that contains a long EXTINF line and contains format string specifiers in an invalid udp:// URI, possibly a variant of CVE-2007-0017...

DEBIAN-CVE-2007-0254

Format string vulnerability in the errorscreatewindow function in errors.c in xine-ui allows attackers to execute arbitrary code via unknown vectors...

CVE-2007-0255

XINE 0.99.4 allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a certain M3U file that contains a long EXTINF line and contains format string specifiers in an invalid udp:// URI, possibly a variant of CVE-2007-0017...

UBUNTU-CVE-2007-0255

XINE 0.99.4 allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a certain M3U file that contains a long EXTINF line and contains format string specifiers in an invalid udp:// URI, possibly a variant of CVE-2007-0017...

Format string

Format string vulnerability in the errorscreatewindow function in errors.c in xine-ui allows attackers to execute arbitrary code via unknown vectors...

CVE-2007-0254

Format string vulnerability in the errorscreatewindow function in errors.c in xine-ui allows attackers to execute arbitrary code via unknown vectors...

CVE-2007-0254

Format string vulnerability in the errorscreatewindow function in errors.c in xine-ui allows attackers to execute arbitrary code via unknown vectors...

CVE-2007-0255

XINE 0.99.4 allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a certain M3U file that contains a long EXTINF line and contains format string specifiers in an invalid udp:// URI, possibly a variant of CVE-2007-0017...

CVE-2007-0254

Format string vulnerability in the errorscreatewindow function in errors.c in xine-ui allows attackers to execute arbitrary code via unknown vectors...

CVE-2007-0255

CVE-2007-0255 affects XINE 0.99.4. A user‑assisted remote actor can supply a crafted M3U file containing a long #EXTINF line and format string specifiers in an invalid udp:// URI, triggering a denial of service (application crash) and potentially arbitrary code execution. This is a variant/relate...

CVE-2007-0255

XINE 0.99.4 allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a certain M3U file that contains a long EXTINF line and contains format string specifiers in an invalid udp:// URI, possibly a variant of CVE-2007-0017...