CVE-2008-1482

Multiple integer overflows in xine-lib 1.1.11 and earlier allow remote attackers to trigger heap-based buffer overflows and possibly execute arbitrary code via 1 a crafted .FLV file, which triggers an overflow in demuxers/demuxflv.c; 2 a crafted .MOV file, which triggers an overflow in...

CVE-2008-0073

Array index error in the sdpplinparse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP servers to execute arbitrary code via a large streamid SDP parameter...

Integer overflow

Multiple integer overflows in xine-lib 1.1.11 and earlier allow remote attackers to trigger heap-based buffer overflows and possibly execute arbitrary code via 1 a crafted .FLV file, which triggers an overflow in demuxers/demuxflv.c; 2 a crafted .MOV file, which triggers an overflow in...

Design/Logic Flaw

Array index error in the sdpplinparse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP servers to execute arbitrary code via a large streamid SDP parameter...

CVE-2008-0073

Array index error in the sdpplinparse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP servers to execute arbitrary code via a large streamid SDP parameter...

CVE-2008-0073

Array index error in the sdpplinparse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP servers to execute arbitrary code via a large streamid SDP parameter...

CVE-2008-0073

CVE-2008-0073 affects xine-lib, where an array indexing vulnerability in the SDP parser (sdpplin_parse in input/libreal/sdpplin.c) could allow a remote RTSP server to execute arbitrary code via a large SDP streamid parameter. Public advisories across distros (Ubuntu, Gentoo GLSA, Mandriva/MVL) de...

CVE-2008-0073

Array index error in the sdpplinparse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP servers to execute arbitrary code via a large streamid SDP parameter...

CVE-2008-1482

CVE-2008-1482 affects xine-lib up to version 1.1.11. The description documents multiple integer overflows that can be triggered by crafted media files (FLV, MOV, RM, MVE, MKV, CAK) parsed by various demuxers (demux_flv.c, demux_qt.c, demux_real.c, demux_wc3movie.c, ebml.c, demux_film.c). These ov...

CVE-2008-1482

Multiple integer overflows in xine-lib 1.1.11 and earlier allow remote attackers to trigger heap-based buffer overflows and possibly execute arbitrary code via 1 a crafted .FLV file, which triggers an overflow in demuxers/demuxflv.c; 2 a crafted .MOV file, which triggers an overflow in...

CVE-2008-0073

Array index error in the sdpplinparse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP servers to execute arbitrary code via a large streamid SDP parameter...

xine-lib多个堆溢出漏洞

BUGTRAQ ID: 28370 xine是一款免费的媒体播放器，支持多种格式。 xine在计算某些目标缓冲区和数组所需分配的内存数时错误的32位计算，导致xine-lib受多个堆溢出漏洞影响，可能允许攻击者控制寄存器和代码流。 以下是有漏洞的代码部分： ----------------------------- A demuxflv堆溢出 ----------------------------- src/demuxers/demuxflv.c： static int parseflvvardemuxflvt this, unsigned char buf, int size, ch...

[SECURITY] Fedora 8 Update: xine-lib-1.1.11-1.fc8

This package contains the Xine library. Xine is a free multimedia player. It can play back various media. It also decodes multimedia files from local disk drives, and displays multimedia streamed over the Internet. It interprets many of the most common multimedia formats available - and some of t...

xine-lib sdpplin_parse()函数远程溢出漏洞

BUGTRAQ ID: 28312 CVECAN ID: CVE-2008-0073 xine是一款免费的媒体播放器，支持多种格式。 xine的input/libreal/sdpplin.c文件中的sdpplinparse函数存在缓冲区溢出漏洞，如果恶意的RTSP流中包含有超长的SDP参数的话，就可能触发这个溢出，导致执行任意指令。 xine-lib 1.1.10.1 xine ---- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://xinehq.de/...

Multiple heap overflows in xine-lib 1.1.11

Luigi Auriemma Application: xine-lib http://xinehq.de Versions: = 1.1.11 Platforms: Linux, BSD, Solaris, Irix, MacOSX, Windows and others Bugs: A heap-overflow in demuxflv B heap-overflow in demuxqt C heap-overflow in demuxreal D heap-overflow in demuxwc3movie E heap-overflow in ebml F...

Xine-Lib 1.1.11 - Multiple Heap Remote Buffer Overflow Vulnerabilities

Xine-Lib 1.1.11 - Multiple Heap Remote Buffer Overflow Vulnerabilities // source: https://www.securityfocus.com/bid/28370/info The 'xine-lib' library is prone to multiple heap-based buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied input...

Xine-Lib 1.1.11 - Multiple Heap Remote Buffer Overflow Vulnerabilities

// source: https://www.securityfocus.com/bid/28370/info The 'xine-lib' library is prone to multiple heap-based buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied input. Attackers can exploit these issues to execute arbitrary code in the context o...

CVE-2008-1161

Buffer overflow in the Matroska demuxer demuxers/demuxmatroska.c in xine-lib before 1.1.10.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a Matroska file with invalid frame sizes...

CVE-2008-1161

Buffer overflow in the Matroska demuxer demuxers/demuxmatroska.c in xine-lib before 1.1.10.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a Matroska file with invalid frame sizes...

Buffer overflow

Buffer overflow in the Matroska demuxer demuxers/demuxmatroska.c in xine-lib before 1.1.10.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a Matroska file with invalid frame sizes...