2923 matches found
Buffer overflow
Buffer overflow in xinelistdeletecurrent in libxine 1.14 and earlier, as distributed in xine-lib 1.1.1 and earlier, allows remote attackers to execute arbitrary code via a crafted MPEG stream...
CVE-2006-1664
Buffer overflow in xinelistdeletecurrent in libxine 1.14 and earlier, as distributed in xine-lib 1.1.1 and earlier, allows remote attackers to execute arbitrary code via a crafted MPEG stream...
[SECURITY] [DSA 1005-1] New xine-lib packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1005-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 16th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1005-1] New xine-lib packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1005-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 16th, 2006 http://www.debian.org/security/faq -...
DSA-1005-1 xine-lib - buffer overflow
Bulletin has no description...
Geeklog lib-sessions.php Session Cookie Handling Administrative Bypass
Binary data 3464.prm...
CVE-2006-0824
Multiple unspecified vulnerabilities in lib-common.php in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to include arbitrary local files and execute arbitrary code via 1 absolute paths in unspecified parameters and 2 the language cookie, as demonstrated for code...
CVE-2006-0823
Multiple SQL injection vulnerabilities in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to inject arbitrary SQL commands via the 1 userid variable to users.php or 2 sessid variable to lib-sessions.php...
CVE-2006-0824
CVE-2006-0824 affects Geeklog: lib-common.php in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allows remote attackers to include arbitrary local files and execute code via absolute paths in unspecified parameters and via the language cookie (demonstrated for code execution using erro...
Sami FTP Server 2.0.1 Remote Buffer Overflow Exploit (cpp)
No description provided by source. // Two includes. include fstream.h include winsock2.h // Project - Settings - Link Object/Library modules 'Ws232.lib' pragma commentlib, "ws232" char MyShellCode = // XOR by \x99\x99\x99\x99. "\xD9\xEE\xD9\x74\x24\xF4\x5B\x31\xC9\xB1\x59\x81\x73\x17\x99\x99"...
Ubuntu 4.10 / 5.04 / 5.10 : xine-lib vulnerability (USN-230-2)
USN-230-1 fixed a vulnerability in the ffmpeg library. The Xine library contains a copy of the ffmpeg code, thus it is vulnerable to the same flaw. For reference, this is the original advisory : Simon Kilvington discovered a buffer overflow in the avcodecdefaultgetbuffer function of the ffmpeg...
Ubuntu 4.10 / 5.04 : xine-lib vulnerabilities (USN-123-1)
Two buffer overflows have been discovered in the MMS and Real RTSP stream handlers of the Xine library. By tricking a user to connect to a malicious MMS or RTSP video/audio stream source with an application that uses this library, an attacker could crash the client and possibly even execute...
Mandrake Linux Security Advisory : xine-lib (MDKSA-2005:228)
Simon Kilvington discovered a vulnerability in FFmpeg libavcodec, which can be exploited by malicious people to cause a DoS Denial of Service and potentially to compromise a user's system. The vulnerability is caused due to a boundary error in the 'avcodecdefaultgetbuffer' function of 'utils.c' i...
Ubuntu 4.10 / 5.04 : xine-lib vulnerability (USN-196-1)
Ulf Harnhammar discovered a format string vulnerability in the CDDB module's cache file handling in the Xine library, which is used by packages such as xine-ui, totem-xine, and gxine. By tricking an user into playing a particular audio CD which has a specially crafted CDDB entry, a remote attacke...
Ubuntu 4.10 : xine-lib vulnerabilities (USN-42-1)
Several buffer overflows have been discovered in xine-lib, the video/audio codec library for Xine frontends xine-ui, totem-xine, kaffeine, and others. If an attacker tricked a user into loading a malicious RTSP stream or a stream with specially crafted AIFF audio or PNM image data, they could...
GLSA-200601-06 : xine-lib, FFmpeg: Heap-based buffer overflow
The remote host is affected by the vulnerability described in GLSA-200601-06 xine-lib, FFmpeg: Heap-based buffer overflow Simon Kilvington has reported a vulnerability in FFmpeg libavcodec. The flaw is due to a buffer overflow error in the 'avcodecdefaultgetbuffer' function. This function doesn't...
xine-lib, FFmpeg: Heap-based buffer overflow
Background xine is a GPL high-performance, portable and reusable multimedia playback engine. xine-lib is xine's core engine. FFmpeg is a very fast video and audio converter and is used in xine-lib. Description Simon Kilvington has reported a vulnerability in FFmpeg libavcodec. The flaw is due to ...
CVE-2005-4593
PHP remote file inclusion vulnerability in phpDocumentor 1.3.0 rc4 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary code via a URL in the 1 FORUMLIB parameter in Documentation/tests/bug-559668.php and 2 the rootdir parameter in docbuilder/filedialog.php...
CVE-2005-4593
PHP remote file inclusion vulnerability in phpDocumentor 1.3.0 rc4 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary code via a URL in the 1 FORUMLIB parameter in Documentation/tests/bug-559668.php and 2 the rootdir parameter in docbuilder/filedialog.php...