CVE-2009-1476: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in lib/loadhttp.c in ippool in Darren Reed IPFilter aka IP Filter 4.1.31 allows local users to gain privileges via vectors involving a long hostname in a URL...

openSUSE 10 Security Update : xine-devel (xine-devel-6230)

This update of xine-lib fixes an integer overflow in the qterror parsetrakatom function in that leads to a heap-based overflow and allows remote attackers to execute arbitrary code via a malformed Quicktime movie file. CVE-2009-1274 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

FreeBSD Ports: libxine

The remote host is missing an update to the system as announced in the referenced advisory. VID 48e14d86-42f1-11de-ad22-000e35248ad7 OpenVAS Vulnerability Test $ Description: Auto generated from VID 48e14d86-42f1-11de-ad22-000e35248ad7 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

FreeBSD Ports: libxine

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Mandriva Linux Security Advisory : cyrus-sasl (MDVSA-2009:113-1)

Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service application crash via strings that are used as input to the saslencode64 function in lib/saslutil.c CVE-2009-0688. The updated packages have be...

FreeBSD : libxine -- multiple vulnerabilities (51d1d428-42f0-11de-ad22-000e35248ad7)

Multiple vulnerabilities were fixed in libxine 1.1.16.2. Tobias Klein reports : FFmpeg contains a type conversion vulnerability while parsing malformed 4X movie files. The vulnerability may be exploited by a remote attacker to execute arbitrary code in the context of FFmpeg or an application usin...

CVE-2009-0688: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service application crash via strings that are used as input to the saslencode64 function in lib/saslutil.c...

CVE-2008-6793: Improper Input Validation

The getfiletype function in lib/filecontent.php in DFLabs PTK 0.1, 0.2, and 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters after an arg1= sequence in a filename within a forensic image...

CVE-2009-1415: Access of Uninitialized Pointer

lib/pk-libgcrypt.c in libgnutls in GnuTLS before 2.6.6 does not properly handle invalid DSA signatures, which allows remote attackers to cause a denial of service application crash and possibly have unspecified other impact via a malformed DSA key that triggers a 1 free of an uninitialized pointe...

CVE-2009-1416: Undefined Security Weakness

lib/gnutlspk.c in libgnutls in GnuTLS 2.5.0 through 2.6.5 generates RSA keys stored in DSA structures, instead of the intended DSA keys, which might allow remote attackers to spoof signatures on certificates or have unspecified other impact by leveraging an invalid DSA key...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 : xine-lib vulnerabilities (USN-763-1)

It was discovered that the QT demuxer in xine-lib did not correctly handle a large count value in an STTS atom, resulting in a heap-based buffer overflow. If a user or automated system were tricked into opening a specially crafted MOV file, an attacker could execute arbitrary code as the user...

Fedora 10 : xine-lib-1.1.16-1.fc10 (2009-0483)

This updates xine-lib to the upstream 1.1.16 release. This fixes several bugs, including the security issues CVE-2008-5234 vector 1, CVE-2008-5236, CVE-2008-5237, CVE-2008-5239, CVE-2008-5240 vectors 3 & 4 and CVE-2008-5243. See http://sourceforge.net/project/shownotes.php?releaseid=652075&groupi...

FreeBSD : xine-lib arbitrary file overwrite (e50b04e8-9c55-11d8-9366-0020ed76ef5a)

From the xinehq advisory : By opening a malicious MRL in any xine-lib based media player, an attacker can write arbitrary content to an arbitrary file, only restricted by the permissions of the user running the application. The flaw is a result of a feature that allows MRLs media resource locator...

Mandriva Linux Security Advisory : xine-lib (MDVSA-2008:124)

A vulnerability in the Speex library was found where it did not properly validate input values read from the Speex files headers. An attacker could create a malicious Speex file that would crash an application or potentially allow the execution of arbitrary code with the privileges of the...

Fedora 10 : xine-lib-1.1.16.2-1.fc10 (2009-1525)

This release contains one new security fix CVE-2008-5240 and corrections of previous security fixes. It also includes fixes for race conditions in gaplessswitch ref. kde bug 180339 See also: http://sourceforge.net/project/shownotes.php?groupid=9655&releaseid= 660071 Note that Tenable Network...

Fedora 10 : xine-lib-1.1.16.3-1.fc10 (2009-3433)

Maintenance release. Fixes two security problems CVE-2009-0385, CVE-2009-1274 and a few miscellaneous bugs. See the upstream changelog for details: http://sourceforge.net/project/shownotes.php?groupid=9655&releaseid= 673233 Note that Tenable Network Security has extracted the preceding descriptio...

Mandriva Linux Security Advisory : xine-lib (MDVSA-2008:020)

Two vulnerabilities discovered in xine-lib allow remote execution of arbitrary code : Heap-based buffer overflow in the rmffdumpcont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows remote attackers to execute arbitrary code via the SDP Abstract attribute, related to the...

Mandriva Linux Security Advisory : mplayer (MDVSA-2008:219)

A vulnerability that was discovered in xine-lib that allowed remote RTSP servers to execute arbitrary code via a large streamid SDP parameter also affects MPlayer CVE-2008-0073. Several integer overflows were discovered by Felipe Andres Manzano in MPlayer's Real video stream demuxing code. These...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : xine-lib vulnerabilities (USN-710-1)

It was discovered that xine-lib did not correctly handle certain malformed Ogg and Windows Media files. If a user or automated system were tricked into opening a specially crafted Ogg or Windows Media file, an attacker could cause xine-lib to crash, creating a denial of service. This issue only...

Mandriva Linux Security Advisory : xine-lib (MDVSA-2008:178)

Alin Rad Pop found an array index vulnerability in the SDP parser of xine-lib. If a user or automated system were tricked into opening a malicious RTSP stream, a remote attacker could possibly execute arbitrary code with the privileges of the user using the program CVE-2008-0073. The ASF demuxer ...