RARLAB WinRar 2.90/3.x - UUE/XXE Invalid Filename Error Message Format String

source: https://www.securityfocus.com/bid/15062/info WinRAR is prone to multiple remote vulnerabilities. These issues include a format string and a buffer overflow vulnerability. Successful exploitation may allow an attacker to execute arbitrary code on a vulnerable computer. WinRAR 3.50 and prio...

xine-lib

New xine-lib packages are available for Slackware 9.1, 10.0, 10.1, 10.2, and -current to fix a security issue. A format string bug may allow the execution of arbitrary code as the user running a xine-lib linked application. The attacker must provide by uploading or running a server specially...

USN-196-1: Xine library vulnerability

Ulf Harnhammar discovered a format string vulnerability in the CDDB module's cache file handling in the Xine library, which is used by packages such as xine-ui, totem-xine, and gxine. By tricking an user into playing a particular audio CD which has a specially-crafted CDDB entry, a remote attacke...

[SECURITY] [DSA 855-1] New weex packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 855-1 [email protected] http://www.debian.org/security/ Martin Schulze October 10th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 855-1] New weex packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 855-1 [email protected] http://www.debian.org/security/ Martin Schulze October 10th, 2005 http://www.debian.org/security/faq -...

Up-IMAPProxy 1.2.31.2.4 - Multiple Unspecified Remote Format String Vulnerabilities

Up-IMAPProxy 1.2.31.2.4 - Multiple Unspecified Remote Format String Vulnerabilities // source: https://www.securityfocus.com/bid/15048/info up-IMAPProxy is reported prone to multiple unspecified remote format-string vulnerabilities. Successful exploitation could cause the application to crash or ...

xine-lib <= 1.1 (media player library) Remote Format String Exploit

No description provided by source. !/usr/bin/perl -- When playing an Audio CD, using xine-lib based media application, the library contacts a CDDB server to retrieve metadata like the title and artist's name. During processing of this data, a response from the server, which is located in memory o...

Up-IMAPProxy 1.2.3/1.2.4 - Multiple Unspecified Remote Format String Vulnerabilities

// source: https://www.securityfocus.com/bid/15048/info up-IMAPProxy is reported prone to multiple unspecified remote format-string vulnerabilities. Successful exploitation could cause the application to crash or to execute arbitrary code in the context of the application. Specific details of the...

xine-lib <= 1.1 (media player library) Remote Format String Exploit

Exploit for linux platform in category remote exploits =================================================================== xine-lib = 1.1 media player library Remote Format String Exploit =================================================================== !/usr/bin/perl -- When playing an Audio C...

[Full-disclosure] [SECURITY] [DSA 852-1] New up-imapproxy packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 852-1 [email protected] http://www.debian.org/security/ Martin Schulze October 9th, 2005 http://www.debian.org/security/faq -...

security advisory - OpenVMPS

security advisory - OpenVMPS What is it? ----------- OpenVMPS is a substitute implementation of Cisco Virtual Membership Policy Server on Catalyst 65500 family of switches. It is used on Cisco LAN switces to dynamically assign ports to VLANs according to Ethernet Address. Because it was developed...

[UNIX] xine based CD Player Format String

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

DSA-855-1 weex - format string vulnerability

Bulletin has no description...

Xine-Lib 1.1 - 'Media Player Library' Remote Format String

!/usr/bin/perl -- When playing an Audio CD, using xine-lib based media application, the library contacts a CDDB server to retrieve metadata like the title and artist's name. During processing of this data, a response from the server, which is located in memory on the stack, is passed to the fprin...

xine-lib media player library format string bug

Format string bug on CDDB server reponse parsing...

OpenVMPS open Cisco VMPS protocol server implementation format string vulnerability

Format string bug on syslog call...

up-imapproxy format string vulnerability

Few format string bugs...

Xine-Lib 1.1 - Media Player Library Remote Format String

Xine-Lib 1.1 - Media Player Library Remote Format String !/usr/bin/perl -- When playing an Audio CD, using xine-lib based media application, the library contacts a CDDB server to retrieve metadata like the title and artist's name. During processing of this data, a response from the server, which ...

[SECURITY] [DSA 852-1] New up-imapproxy packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 852-1 [email protected] http://www.debian.org/security/ Martin Schulze October 9th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 852-1] New up-imapproxy packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 852-1 [email protected] http://www.debian.org/security/ Martin Schulze October 9th, 2005 http://www.debian.org/security/faq -...