26 matches found
xine-lib: Format string vulnerability
Background xine-lib is a multimedia library which can be utilized to create multimedia frontends. It includes functions to retrieve information about audio CD contents from public CDDB servers. Description Ulf Harnhammar discovered a format string bug in the routines handling CDDB server response...
libxine -- format string vulnerability
Gentoo Linux Security Advisory reports: Ulf Harnhammar discovered a format string bug in the routines handling CDDB server response contents. An attacker could submit malicious information about an audio CD to a public CDDB server or impersonate a public CDDB server. When the victim plays this CD...
Fedora Core 3 : grip-3.2.0-4 (2005-203)
This fixes a buffer overflow when the CDDB server returns more than 16 matches. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
grip, GnomeVFS, libcdaudio CDDB client buffer overflow
Buffer overflow on CDDB server response parsing...
GLSA-200504-07 : GnomeVFS, libcdaudio: CDDB response overflow
The remote host is affected by the vulnerability described in GLSA-200504-07 GnomeVFS, libcdaudio: CDDB response overflow Joseph VanAndel has discovered a buffer overflow in Grip when processing large CDDB results see GLSA 200503-21. The same overflow is present in GnomeVFS and libcdaudio code...
GLSA-200503-21 : Grip: CDDB response overflow
The remote host is affected by the vulnerability described in GLSA-200503-21 Grip: CDDB response overflow Joseph VanAndel has discovered a buffer overflow in Grip when processing large CDDB results. Impact : A malicious CDDB server could cause Grip to crash by returning more then 16 matches,...