CVE-2009-4245

Heap-based buffer overflow in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allows remote attackers to cause a denial of service...

CVE-2009-4245

CVE-2009-4245 is a heap-based buffer overflow in RealNetworks RealPlayer/HelixPlayer GIF processing (gifcodec.cpp/gifimage.cpp). Affected products include RealPlayer 10, 10.5 (6.0.12.1040–1741), RealPlayer 11 (11.0.0–11.0.4), RealPlayer Enterprise, Mac/Linux RealPlayer 10/10.1, and Helix Player 1...

Ubuntu Update for gzip vulnerabilities USN-889-1

Ubuntu Update for Linux kernel vulnerabilities USN-889-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN8891.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for gzip vulnerabilities USN-889-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-889-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-889-1: gzip vulnerabilities

It was discovered that gzip incorrectly handled certain malformed compressed files. If a user or automated system were tricked into opening a specially crafted gzip file, an attacker could cause gzip to crash or possibly execute arbitrary code with the privileges of the user invoking the program...

Microsoft DirectX RLE Compressed Targa Image File Heap Overflow (CVE-2006-4183)

Microsoft DirectX is a set of libraries that aim for accelerated video and audio experience on Microsoft Windows operating system. The three-dimension 3D acceleration engine of DirectX is known as Direct3D. Direct3D include texture rendering, which displays bitmap images on the surface of 3D...

Design/Logic Flaw

Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild...

CVE-2009-4324

Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild...

CVE-2009-4310

Stack-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via crafted compressed video data in an IV41 stream in a media file, leading to many loop iterations...

Stack overflow

Stack-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via crafted compressed video data in an IV41 stream in a media file, leading to many loop iterations...

CVE-2009-4310

CVE-2009-4310 concerns the Intel Indeo41 codec used by Windows Media Player. The issue is a stack-based buffer overflow in IV41 streams within AVI containers that allows remote code execution on Windows 2000 SP4, XP SP2/XP SP3, and Server 2003 SP2 when processing crafted video data. Affected comp...

CVE-2009-4310

Stack-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via crafted compressed video data in an IV41 stream in a media file, leading to many loop iterations...

[SECURITY] Fedora 11 Update: libsndfile-1.0.20-3.fc11

libsndfile is a C library for reading and writing sound files such as AIFF, AU, WAV, and others through one standard interface. It can currently read/write 8, 16, 24 and 32-bit PCM files as well as 32 and 64-bit floating point WAV files and a number of compressed formats. It compiles and runs on...

Sophos Anti-Virus ZIP File Handling Denial of Service (CVE-2005-1530)

Sophos Anti-Virus AV is a product that provides virus scanning functionality for desktop and server systems. It can scan files on the local system or files downloaded from network for known viruses, Trojans, and other malicious programs. The AV product is capable of interpreting numerous...

PT-2009-4929 · Microsoft · Windows Media Runtime

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Media Runtime affected versions not specified Description: The issue is related to the improper initialization of unspecified functions within compressed audio files. This allows remote attackers to execute arbitrary code vi...

Vulnerabilities in Windows Media Runtime Could Allow Remote Code Execution (975682)

This host is missing a critical security update according to Microsoft Bulletin MS09-051. OpenVAS Vulnerability Test $Id: secpodms09-051.nasl 5934 2017-04-11 12:28:28Z antu123 $ Vulnerabilities in Windows Media Runtime Could Allow Remote Code Execution 975682 Authors: Antu Sanadi Updated By:...

Microsoft Windows Media Runtime Voice Sampler Rate Code Execution (MS09-051; CVE-2009-0555; CVE-2009-2525)

A remote code execution vulnerability exists in the way that Microsoft Windows Media Runtime and the Windows Media Player handle specially crafted ASF files. The Microsoft Windows Media Format Runtime provides information and tools for applications that use Windows Media content. Windows Media...

Multiple Security Products LHA File Handling Buffer Overflow (CVE-2005-0643)

Several anti-virus products ,both for Enterprise and Desktop consumer use, are capable of detecting malicious content not only within regular files but also within compressed archives such as LHA archives. There exists a vulnerability in the way several anti-virus libraries parse LHA compressed...

SuSE9 Security Update : perl-Net-DNS (YOU Patch Number 11702)

perl-Net-DNS uses sequential IDs for DNS lookups which could cause problems with some programs like spamassassin. It potentially also simplifies DNS spoofing attacks against perl-Net-DNS. CVE-2007-3377 Additionally, malformed compressed DNS packets could trigger an endless loop in perl-Net-DNS...

[SECURITY] Fedora 11 Update: libvorbis-1.2.0-8.fc11

Ogg Vorbis is a fully open, non-proprietary, patent- and royalty-free, general-purpose compressed audio format for audio and music at fixed and variable bitrates from 16 to 128 kbps/channel. The libvorbis package contains runtime libraries for use in programs that support Ogg Vorbis...