Mandriva Security Advisory MDVSA-2009:319 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory MDVSA-2009:319. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandriva Linux Security Advisory : xine-lib (MDVSA-2009:319)

Vulnerabilities have been discovered and corrected in xine-lib : Failure on Ogg files manipulation can lead remote attackers to cause a denial of service by using crafted files CVE-2008-3231. Failure on manipulation of either MNG or Real or MOD files can lead remote attackers to cause a denial of...

openSUSE Security Update : xine-devel (xine-devel-483)

This update of xine fixes multiple buffer overflows while parsing files : - CVE-2008-3231 - CVE-2008-5233 - CVE-2008-5234 - CVE-2008-5235 - CVE-2008-5236 - CVE-2008-5237 - CVE-2008-5238 - CVE-2008-5239 - CVE-2008-5240 - CVE-2008-5241 - CVE-2008-5242 - CVE-2008-5243 - CVE-2008-5244 - CVE-2008-5245...

Mandriva Linux Security Advisory : xine-lib (MDVSA-2009:020)

Failure on Ogg files manipulation can lead remote attackers to cause a denial of service by using crafted files CVE-2008-3231. Failure on manipulation of either MNG or Real or MOD files can lead remote attackers to cause a denial of service by using crafted files CVE: CVE-2008-5233. Heap-based...

openSUSE 10 Security Update : xine-devel (xine-devel-5966)

This update of xine fixes multiple buffer overflows while parsing files : - CVE-2008-3231 - CVE-2008-5233 - CVE-2008-5234 - CVE-2008-5235 - CVE-2008-5236 - CVE-2008-5237 - CVE-2008-5238 - CVE-2008-5239 - CVE-2008-5240 - CVE-2008-5241 - CVE-2008-5242 - CVE-2008-5243 - CVE-2008-5244 - CVE-2008-5245...

Mandrake Security Advisory MDVSA-2009:020 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory MDVSA-2009:020. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

CVE-2008-5241

CVE-2008-5241: Integer underflow in xine-lib's demux_qt.c affects 1.1.12 and earlier 1.1.15 (and older); a crafted QuickTime/MOV file with a small moov_atom_size can crash the player (remote DoS). Remediation per Gentoo GLSA-201006-04 is to upgrade xine-lib to a fixed version (>= 1.1.16.3). Ot...