CVE-2005-0087

The alsa-lib package in Red Hat Linux 4 disables stack protection for the libasound.so library, which makes it easier for attackers to execute arbitrary code if there are other vulnerabilities in the library...

CVE-2005-0087: Undefined Security Weakness

The alsa-lib package in Red Hat Linux 4 disables stack protection for the libasound.so library, which makes it easier for attackers to execute arbitrary code if there are other vulnerabilities in the library...

GLSA-200501-07 : xine-lib: Multiple overflows

The remote host is affected by the vulnerability described in GLSA-200501-07 xine-lib: Multiple overflows Ariel Berkman discovered that xine-lib reads specific input data into an array without checking the input size in demuxaiff.c, making it vulnerable to a buffer overflow CAN-2004-1300 . iDefen...

CVE-2004-1455

Stack-based buffer overflow in Xine-lib-rc5 in xine-lib 1rc5-r2 and earlier allows remote attackers to execute arbitrary code via crafted playlists that result in a long vcd:// URL...

CVE-2004-1475

Multiple stack-based buffer overflows in xine-lib 1-rc2 through 1-rc5 allow attackers to execute arbitrary code via 1 long VideoCD vcd:// MRLs or 2 long subtitle lines...

CVE-2004-1476

Stack-based buffer overflow in the VideoCD VCD code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label...

CVE-2004-1476

Stack-based buffer overflow in the VideoCD VCD code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label...

CVE-2004-1475

CVE-2004-1475 affects xine-lib 1-rc2 through 1-rc5. The vulnerability comprises multiple buffer overflows: two stack-based overflows in the VCD disc label handling (vcd:// MRLs) and in subtitle parsing, plus a heap-based overflow in the DVD sub-picture decoder. These flaws can allow remote attack...

CVE-2004-1476

CVE-2004-1476 affects xine-lib (versions 1-rc2 through 1-rc5, derived from libcdio). The vulnerability is a stack-based buffer overflow in the VideoCD (VCD) handling, exploitable via a VideoCD with an unterminated disk label, which can lead to arbitrary code execution. OpenVAS/Gentoo advisories i...

CVE-2004-1455

Stack-based buffer overflow in Xine-lib-rc5 in xine-lib 1rc5-r2 and earlier allows remote attackers to execute arbitrary code via crafted playlists that result in a long vcd:// URL...

CVE-2004-1475

Multiple stack-based buffer overflows in xine-lib 1-rc2 through 1-rc5 allow attackers to execute arbitrary code via 1 long VideoCD vcd:// MRLs or 2 long subtitle lines...

CVE-2004-1455

CVE-2004-1455 describes a stack-based buffer overflow in xine-lib-rc5 (xine-lib 1_rc5-r2 and earlier) that allows remote attackers to execute arbitrary code via crafted playlists producing a long vcd:// URL. This is the core vulnerability reported by multiple sources (NVD, CVE listing, Gentoo GLS...

CVE-2004-1455: Undefined Security Weakness

Stack-based buffer overflow in Xine-lib-rc5 in xine-lib 1rc5-r2 and earlier allows remote attackers to execute arbitrary code via crafted playlists that result in a long vcd:// URL...

CVE-2004-1475: Undefined Security Weakness

Multiple stack-based buffer overflows in xine-lib 1-rc2 through 1-rc5 allow attackers to execute arbitrary code via 1 long VideoCD vcd:// MRLs or 2 long subtitle lines...

CVE-2004-1476: Undefined Security Weakness

Stack-based buffer overflow in the VideoCD VCD code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label...

[SECURITY] [DSA 657-1] New xine-lib packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 657-1 [email protected] http://www.debian.org/security/ Martin Schulze January 25th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 657-1] New xine-lib packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 657-1 [email protected] http://www.debian.org/security/ Martin Schulze January 25th, 2005 http://www.debian.org/security/faq -...

Debian DSA-657-1 : xine-lib - buffer overflow

A heap overflow has been discovered in the DVD subpicture decoder of xine-lib. An attacker could cause arbitrary code to be executed on the victims host by supplying a malicious MPEG. By tricking users to view a malicious network stream, this is remotely exploitable. %NASLMINLEVEL 70300 C Tenable...

DSA-657-1 xine-lib - buffer overflow

Bulletin has no description...

CVE-2004-1049

A vulnerability exists in the Microsoft Windows LoadImage API , which is used for loading and rendering graphical resources like icons, cursors, and bitmaps. The API fails to properly validate image sizes, leading to an integer overflow and subsequent heap memory overflow . This flaw can be explo...