[SECURITY] Fedora 9 Update: xine-lib-1.1.15-1.fc9

This package contains the Xine library. Xine is a free multimedia player. It can play back various media. It also decodes multimedia files from local disk drives, and displays multimedia streamed over the Internet. It interprets many of the most common multimedia formats available - and some of t...

[SECURITY] Fedora 8 Update: xine-lib-1.1.15-1.fc8

This package contains the Xine library. Xine is a free multimedia player. It can play back various media. It also decodes multimedia files from local disk drives, and displays multimedia streamed over the Internet. It interprets many of the most common multimedia formats available - and some of t...

Fedora 8 : xine-lib-1.1.15-1.fc8 (2008-7572)

This release fixes multiple bugs and security issues: - DoS via corrupted Ogg files CVE-2008-3231 - multiple possible buffer overflows detailed in oCERT-2008-008 For more details, see: http://sourceforge.net/project/shownotes.php?releaseid=619869&groupi d=9655...

Fedora 9 : xine-lib-1.1.15-1.fc9 (2008-7512)

This release fixes multiple bugs and security issues: - DoS via corrupted Ogg files CVE-2008-3231 - multiple possible buffer overflows detailed in oCERT-2008-008 For more details, see: http://sourceforge.net/project/shownotes.php?releaseid=619869&groupi d=9655...

FreeBSD Ports: libxine

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

libxine -- multiple buffer overflows in RTSP

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: libxine

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

xine-lib < 1.1.16.1 Multiple Vulnerabilities

xine-lib is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

xine-lib Multiple Vulnerabilities (Aug-08)

The host has xine-lib installed, which prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodxine-libmultvulnaug08900041.nasl 7823 2017-11-20 08:54:04Z cfischer $ Description: xine-lib Multiple Vulnerabilities Aug-08 Authors: Chandan S Copyright: Copyright C 2008 SecPod,...

[oCERT-2008-008] multiple heap overflows in xine-lib

2008-008 multiple heap overflows in xine-lib Description: The xine free multimedia player suffers from a number of vulnerabilities ranging in severity. The worst of these vulnerabilities results in arbitrary code execution and the least, in unexpected process termination. Five heap buffer overflo...

xine-lib Multiple Vulnerabilities

The host is installed with xine-lib, which prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodxine-libmultcodeexedosvuln900111.nasl 7823 2017-11-20 08:54:04Z cfischer $ Description: xine-lib Multiple Vulnerabilities Authors: Sharath S Copyright: Copyright C 2008 SecPod,...

xine-lib Multiple Vulnerabilities

xine-lib is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 6.06 LTS / 7.04 / 7.10 / 8.04 LTS : xine-lib vulnerabilities (USN-635-1)

Alin Rad Pop discovered an array index vulnerability in the SDP parser. If a user or automated system were tricked into opening a malicious RTSP stream, a remote attacker may be able to execute arbitrary code with the privileges of the user invoking the program. CVE-2008-0073 Luigi Auriemma...

xine-lib 1.1.14多个远程缓冲区溢出漏洞

BUGTRAQ ID: 30698 CNCAN ID：CNCAN-2008081801 xine-lib是一款XINE提供的媒体库。 xine-lib存在多个缓冲区溢出错误，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 -Real demuxer存在缓冲区溢出。 -id3.c中存在可利用的堆缓冲区溢出。 xine xine-lib 1.1.14 xine xine-lib 1.1.13 xine xine-lib 1.1.12 xine xine-lib 1.1.11 1 xine xine-lib 1.1.11 xine xine-lib 1.1.10 1 xine xine-l...

CVE-2008-3591: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in lib/class.admin.php in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to execute arbitrary SQL commands via the symauth cookie in a /publish/filemanager/ request to index.php...

OpenVMS fingerd remote stack overflow

sup bugtraq. Since a group of lads are giving a talk on Hacking OpenVMS at defcon I figured I'd release a vulnerability in the OpenVMS finger service part of the MultiNet package to give people a few days to figure out an exploit before the methods are documented for us by the guys giving the tal...

GLSA-200808-01 : xine-lib: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200808-01 xine-lib: User-assisted execution of arbitrary code Multiple vulnerabilities have been discovered in xine-lib: Alin Rad Pop of Secunia reported an array indexing vulnerability in the sdpplinparse function in the file...

USN-635-1: xine-lib vulnerabilities

Alin Rad Pop discovered an array index vulnerability in the SDP parser. If a user or automated system were tricked into opening a malicious RTSP stream, a remote attacker may be able to execute arbitrary code with the privileges of the user invoking the program. CVE-2008-0073 Luigi Auriemma...

CVE-2008-3100

The CVE-2008-3100 issue affects Owl Intranet Knowledgebase/Engine (

CVE-2008-3100: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in lib/owl.lib.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter in a getpasswd action to register.php...