4279 matches found
[SECURITY] [DSA 657-1] New xine-lib packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 657-1 [email protected] http://www.debian.org/security/ Martin Schulze January 25th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 657-1] New xine-lib packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 657-1 [email protected] http://www.debian.org/security/ Martin Schulze January 25th, 2005 http://www.debian.org/security/faq -...
Debian DSA-657-1 : xine-lib - buffer overflow
A heap overflow has been discovered in the DVD subpicture decoder of xine-lib. An attacker could cause arbitrary code to be executed on the victims host by supplying a malicious MPEG. By tricking users to view a malicious network stream, this is remotely exploitable. %NASLMINLEVEL 70300 C Tenable...
DSA-657-1 xine-lib - buffer overflow
Bulletin has no description...
CVE-2004-1049
A vulnerability exists in the Microsoft Windows LoadImage API , which is used for loading and rendering graphical resources like icons, cursors, and bitmaps. The API fails to properly validate image sizes, leading to an integer overflow and subsequent heap memory overflow . This flaw can be explo...
CVE-2004-1379
CVE-2004-1379 affects xine-lib prior to 0.9.8-2woody3 ( woody) and earlier, with a heap overflow in the DVD subpicture decoder that lets an attacker cause arbitrary code execution by processing a malicious MPEG header. The Debian advisory confirms remote, remote-executable impact via a crafted ne...
CVE-2004-1379: Undefined Security Weakness
Heap-based buffer overflow in the DVD subpicture decoder in xine xine-lib 1-rc5 and earlier allows remote attackers to execute arbitrary code via a 1 DVD or 2 MPEG subpicture header where the second field reuses RLE data from the end of the first field...
Mandrake Linux Security Advisory : xine-lib (MDKSA-2005:011)
iDefense discovered that the PNATAG handling code in pnmgetchunk does not check if the input size is larger than the buffer size CVE-2004-1187. As well, they discovered that in this same function, a negative value could be given to an unsigned variable that specifies the read length of input data...
CVE-2004-1049: Undefined Security Weakness
Integer overflow in the LoadImage API of the USER32 Lib for Microsoft Windows allows remote attackers to execute arbitrary code via a .bmp, .cur, .ico or .ani file with a large image size field, which leads to a buffer overflow, aka the "Cursor and Icon Format Handling Vulnerability."...
CVE-2004-1300
Buffer overflow in the openaifffile function in demuxaiff.c for xine-lib libxine 1-rc7 allows remote attackers to execute arbitrary code via a crafted AIFF file...
CVE-2004-1300
Buffer overflow in the openaifffile function in demuxaiff.c for xine-lib libxine 1-rc7 allows remote attackers to execute arbitrary code via a crafted AIFF file...
CVE-2004-1476
Stack-based buffer overflow in the VideoCD VCD code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label...
CVE-2004-1476
Stack-based buffer overflow in the VideoCD VCD code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label...
CVE-2004-1455
Stack-based buffer overflow in Xine-lib-rc5 in xine-lib 1rc5-r2 and earlier allows remote attackers to execute arbitrary code via crafted playlists that result in a long vcd:// URL...
CVE-2004-1475
Multiple stack-based buffer overflows in xine-lib 1-rc2 through 1-rc5 allow attackers to execute arbitrary code via 1 long VideoCD vcd:// MRLs or 2 long subtitle lines...
xine-lib buffer overflows
buffer overflow in the PNM, VCD and DVD handling code...
XSA-2004-7: stack overflow in AIFF demultiplexer
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 xine security announcement ========================== Announcement-ID: XSA-2004-7 Summary: A stack buffer overflow vulnerability in the AIFF demultiplexer has been found by Ariel Berkman and was reported to the xine team by D. J. Bernstein. This can b...
CVE-2004-1300
CVE-2004-1300 affects xine-lib (libxine) 1-rc7, where a buffer overflow in demux_aiff.c:open_aiff_file allows remote attackers to execute arbitrary code via a crafted AIFF file. Multiple sources (NVD, SUSE, Gentoo GLSA, OpenVAS/Nessus references) describe the vulnerability as a buffer overflow in...
