Ubuntu 6.06 LTS / 7.04 / 7.10 / 8.04 LTS : xine-lib vulnerabilities (USN-635-1)

Alin Rad Pop discovered an array index vulnerability in the SDP parser. If a user or automated system were tricked into opening a malicious RTSP stream, a remote attacker may be able to execute arbitrary code with the privileges of the user invoking the program. CVE-2008-0073 Luigi Auriemma...

xine-lib 1.1.14多个远程缓冲区溢出漏洞

BUGTRAQ ID: 30698 CNCAN ID：CNCAN-2008081801 xine-lib是一款XINE提供的媒体库。 xine-lib存在多个缓冲区溢出错误，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 -Real demuxer存在缓冲区溢出。 -id3.c中存在可利用的堆缓冲区溢出。 xine xine-lib 1.1.14 xine xine-lib 1.1.13 xine xine-lib 1.1.12 xine xine-lib 1.1.11 1 xine xine-lib 1.1.11 xine xine-lib 1.1.10 1 xine xine-l...

CVE-2008-3591: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in lib/class.admin.php in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to execute arbitrary SQL commands via the symauth cookie in a /publish/filemanager/ request to index.php...

OpenVMS fingerd remote stack overflow

sup bugtraq. Since a group of lads are giving a talk on Hacking OpenVMS at defcon I figured I'd release a vulnerability in the OpenVMS finger service part of the MultiNet package to give people a few days to figure out an exploit before the methods are documented for us by the guys giving the tal...

GLSA-200808-01 : xine-lib: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200808-01 xine-lib: User-assisted execution of arbitrary code Multiple vulnerabilities have been discovered in xine-lib: Alin Rad Pop of Secunia reported an array indexing vulnerability in the sdpplinparse function in the file...

USN-635-1: xine-lib vulnerabilities

Alin Rad Pop discovered an array index vulnerability in the SDP parser. If a user or automated system were tricked into opening a malicious RTSP stream, a remote attacker may be able to execute arbitrary code with the privileges of the user invoking the program. CVE-2008-0073 Luigi Auriemma...

CVE-2008-3100

The CVE-2008-3100 issue affects Owl Intranet Knowledgebase/Engine (

CVE-2008-3100: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in lib/owl.lib.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter in a getpasswd action to register.php...

Design/Logic Flaw

xine-lib before 1.1.15 allows remote attackers to cause a denial of service crash via a crafted OGG file, as demonstrated by playing lol-ffplay.ogg with xine...

CVE-2008-3231

xine-lib before 1.1.15 allows remote attackers to cause a denial of service crash via a crafted OGG file, as demonstrated by playing lol-ffplay.ogg with xine...

CVE-2008-3231

xine-lib before 1.1.15 allows remote attackers to cause a denial of service crash via a crafted OGG file, as demonstrated by playing lol-ffplay.ogg with xine...

CVE-2008-3231

xine-lib before 1.1.15 allows remote attackers to cause a denial of service crash via a crafted OGG file, as demonstrated by playing lol-ffplay.ogg with xine...

CVE-2008-3231

xine-lib before 1.1.16.3 is affected by CVE-2008-3231, with a remote denial of service via crafted OGG files (as demonstrated by lol-ffplay.ogg). Multiple open-source advisories (Red Hat, Gentoo GLSA, Mandriva/OpenVAS listings) confirm remote crash scenarios triggered while parsing various media ...

CVE-2008-3231: Improper Input Validation

xine-lib before 1.1.15 allows remote attackers to cause a denial of service crash via a crafted OGG file, as demonstrated by playing lol-ffplay.ogg with xine...

libxine -- denial of service vulnerability

xine team reports: A new xine-lib version is now available. This release contains some security fixes, notably a DoS via corrupted Ogg files CVE-2008-3231, some related fixes, and fixes for a few possible buffer overflows...

CesarFTP Server Long Command Denial of Service Exploit

No description provided by source. / ----------------------------------------------------------------------- cesarftp.c - Cesar FTP Server Long Command DoS Exploit Copyright C 2000-2004 HUC All Rights Reserved. Author : lion : [email protected] : http://www.cnhonker.com Date : 2004-08-30...

AIX 610000 : U817157

The remote host is missing AIX PTF U817157 which is related to the security of the package X11.base.lib You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

CVE-2008-2729: Exposure of Sensitive Information to an Unauthorized Actor

arch/x8664/lib/copyuser.S in the Linux kernel before 2.6.19 on some AMD64 systems does not erase destination memory locations after an exception during kernel memory copy, which allows local users to obtain sensitive information...

CVE-2008-2827: Undefined Security Weakness

The rmtree function in lib/File/Path.pm in Perl 5.10 does not properly check permissions before performing a chmod, which allows local users to modify the permissions of arbitrary files via a symlink attack, a different vulnerability than CVE-2005-0448 and CVE-2004-0452...

xine 0.99.2 Remote Stack Overflow Exploit

No description provided by source. / $ An open security advisory 6 - Xine vcd MRL input identifier management overflow 1: Bug Researcher: c0ntexatopen-security.org 2: Bug Released: July 28th 2004 3: Bug Impact Rate: Medium / Hi 4: Bug Scope Rate: Remote / Local $ This advisory and/or proof of...