XINE format string bugs when handling non existen file

Author : KaDaL-X email : [email protected] website : http://kandangjamur.net Software tested Version : 0.99.4 Vendor : http://xine.sourceforge.net Proof Of Concept : Type in your unix console something like this : kandangjamur$xine p-p.mp3 Then, there are two error alert box causing by this...

Xine media player format string vulnerability

Format string bug on diagnostic message printing, including playlist files parsing...

Xine 0.99.x - Filename Handling Remote Format String

Xine 0.99.x - Filename Handling Remote Format String source: https://www.securityfocus.com/bid/17769/info The xine package is susceptible to a remote format-string vulnerability. This issue arises when the application handles specially crafted filenames. An attacker can exploit this vulnerability...

Xine 0.99.x - Filename Handling Remote Format String

source: https://www.securityfocus.com/bid/17769/info The xine package is susceptible to a remote format-string vulnerability. This issue arises when the application handles specially crafted filenames. An attacker can exploit this vulnerability by crafting a malicious filename that contains forma...

GLSA-200604-16 : xine-lib: Buffer overflow vulnerability

The remote host is affected by the vulnerability described in GLSA-200604-16 xine-lib: Buffer overflow vulnerability Federico L. Bossi Bonin discovered that when handling MPEG streams xine-lib fails to make a proper boundary check of the input data supplied by the user before copying it to an...

GLSA-200604-15 : xine-ui: Format string vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200604-15 xine-ui: Format string vulnerabilities Ludwig Nussel discovered that xine-ui incorrectly implements formatted printing. Impact : By constructing a malicious playlist file, a remote attacker could exploit these...

xine-lib: Buffer overflow vulnerability

Background xine-lib is the xine core engine. xine is a free multimedia player. It plays CDs, DVDs, and VCDs, and can also decode other common multimedia formats. Description Federico L. Bossi Bonin discovered that when handling MPEG streams xine-lib fails to make a proper boundary check of the...

xine-ui: Format string vulnerabilities

Background xine-ui is a skin-based user interface for xine. xine is a free multimedia player. It plays CDs, DVDs, and VCDs, and can also decode other common multimedia formats. Description Ludwig Nussel discovered that xine-ui incorrectly implements formatted printing. Impact By constructing a...

CVE-2006-1905

Multiple format string vulnerabilities in xiTK xitk/main.c in xine 0.99.3 allow remote attackers to execute arbitrary code via format string specifiers in a long filename on an EXTINFO line in a playlist file...

CVE-2006-1905

Multiple format string vulnerabilities in xiTK xitk/main.c in xine 0.99.3 allow remote attackers to execute arbitrary code via format string specifiers in a long filename on an EXTINFO line in a playlist file...

Format string

Multiple format string vulnerabilities in xiTK xitk/main.c in xine 0.99.3 allow remote attackers to execute arbitrary code via format string specifiers in a long filename on an EXTINFO line in a playlist file...

CVE-2006-1905

Multiple format string vulnerabilities in xiTK xitk/main.c in xine 0.99.3 allow remote attackers to execute arbitrary code via format string specifiers in a long filename on an EXTINFO line in a playlist file...

DEBIAN-CVE-2006-1905

Multiple format string vulnerabilities in xiTK xitk/main.c in xine 0.99.3 allow remote attackers to execute arbitrary code via format string specifiers in a long filename on an EXTINFO line in a playlist file...

CVE-2006-1905

CVE-2006-1905 affects xine (xiTK, xiTk/main.c) with multiple format-string vulnerabilities in the xine UI when processing a long filename on an EXTINFO line in a playlist. A remote attacker could execute arbitrary code via format specifiers. Affected software is xine 0.99.3 (and related CVE-2006-...

CVE-2006-1905

Multiple format string vulnerabilities in xiTK xitk/main.c in xine 0.99.3 allow remote attackers to execute arbitrary code via format string specifiers in a long filename on an EXTINFO line in a playlist file...

CVE-2006-1905

Multiple format string vulnerabilities in xiTK xitk/main.c in xine 0.99.3 allow remote attackers to execute arbitrary code via format string specifiers in a long filename on an EXTINFO line in a playlist file...

[Full-disclosure] Remote Xine Format String Vulnerability

/ $ An open security advisory 16 - Xine Media Player Format String Bug 1: Bug Researcher: c0ntex - c0ntexbatgmail.com -+- www.open-security.org 2: Bug Released: April 18th 2006 3: Bug Impact Rate: Undefined 4: Bug Scope Rate: Local / Remote $ This advisory and/or proof of concept code must not be...

xine -- multiple remote string vulnerabilities

c0ntexb reports: There are 2 format string bugs in the latest version of Xine that could be exploited by a malicious person to execute code on the system of a remote user running the media player against a malicious playlist file. By passing a format specifier in the path of a file that is embedd...

Xine 0.9/1.0 - Playlist Handling Remote Format String

source: https://www.securityfocus.com/bid/17579/info The xine package is reported prone to a remote format-string vulnerability. This issue arises when the application handles specially crafted playlist files. An attacker can exploit this vulnerability by crafting a malicious file that contains...

Xine 0.91.0 - Playlist Handling Remote Format String

Xine 0.91.0 - Playlist Handling Remote Format String source: https://www.securityfocus.com/bid/17579/info The xine package is reported prone to a remote format-string vulnerability. This issue arises when the application handles specially crafted playlist files. An attacker can exploit this...