5437 matches found
DSA-657-1 xine-lib - buffer overflow
Bulletin has no description...
Debian DSA-657-1 : xine-lib - buffer overflow
A heap overflow has been discovered in the DVD subpicture decoder of xine-lib. An attacker could cause arbitrary code to be executed on the victims host by supplying a malicious MPEG. By tricking users to view a malicious network stream, this is remotely exploitable. %NASLMINLEVEL 70300 C Tenable...
CVE-2004-1049
A vulnerability exists in the Microsoft Windows LoadImage API , which is used for loading and rendering graphical resources like icons, cursors, and bitmaps. The API fails to properly validate image sizes, leading to an integer overflow and subsequent heap memory overflow . This flaw can be explo...
CVE-2004-1379
CVE-2004-1379 affects xine-lib prior to 0.9.8-2woody3 ( woody) and earlier, with a heap overflow in the DVD subpicture decoder that lets an attacker cause arbitrary code execution by processing a malicious MPEG header. The Debian advisory confirms remote, remote-executable impact via a crafted ne...
CVE-2004-1049: Undefined Security Weakness
Integer overflow in the LoadImage API of the USER32 Lib for Microsoft Windows allows remote attackers to execute arbitrary code via a .bmp, .cur, .ico or .ani file with a large image size field, which leads to a buffer overflow, aka the "Cursor and Icon Format Handling Vulnerability."...
CVE-2004-1379: Undefined Security Weakness
Heap-based buffer overflow in the DVD subpicture decoder in xine xine-lib 1-rc5 and earlier allows remote attackers to execute arbitrary code via a 1 DVD or 2 MPEG subpicture header where the second field reuses RLE data from the end of the first field...
Mandrake Linux Security Advisory : xine-lib (MDKSA-2005:011)
iDefense discovered that the PNATAG handling code in pnmgetchunk does not check if the input size is larger than the buffer size CVE-2004-1187. As well, they discovered that in this same function, a negative value could be given to an unsigned variable that specifies the read length of input data...
CVE-2004-1300
Buffer overflow in the openaifffile function in demuxaiff.c for xine-lib libxine 1-rc7 allows remote attackers to execute arbitrary code via a crafted AIFF file...
CVE-2004-1300
Buffer overflow in the openaifffile function in demuxaiff.c for xine-lib libxine 1-rc7 allows remote attackers to execute arbitrary code via a crafted AIFF file...
CVE-2004-1455
Stack-based buffer overflow in Xine-lib-rc5 in xine-lib 1rc5-r2 and earlier allows remote attackers to execute arbitrary code via crafted playlists that result in a long vcd:// URL...
CVE-2004-1475
Multiple stack-based buffer overflows in xine-lib 1-rc2 through 1-rc5 allow attackers to execute arbitrary code via 1 long VideoCD vcd:// MRLs or 2 long subtitle lines...
CVE-2004-1476
Stack-based buffer overflow in the VideoCD VCD code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label...
CVE-2004-1476
Stack-based buffer overflow in the VideoCD VCD code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label...
XSA-2004-7: stack overflow in AIFF demultiplexer
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 xine security announcement ========================== Announcement-ID: XSA-2004-7 Summary: A stack buffer overflow vulnerability in the AIFF demultiplexer has been found by Ariel Berkman and was reported to the xine team by D. J. Bernstein. This can b...
xine-lib buffer overflows
buffer overflow in the PNM, VCD and DVD handling code...
CVE-2004-1300
CVE-2004-1300 affects xine-lib (libxine) 1-rc7, where a buffer overflow in demux_aiff.c:open_aiff_file allows remote attackers to execute arbitrary code via a crafted AIFF file. Multiple sources (NVD, SUSE, Gentoo GLSA, OpenVAS/Nessus references) describe the vulnerability as a buffer overflow in...
CVE-2004-1300
Buffer overflow in the openaifffile function in demuxaiff.c for xine-lib libxine 1-rc7 allows remote attackers to execute arbitrary code via a crafted AIFF file...
CVE-2004-1300
Buffer overflow in the openaifffile function in demuxaiff.c for xine-lib libxine 1-rc7 allows remote attackers to execute arbitrary code via a crafted AIFF file...
CVE-2004-1300: Undefined Security Weakness
Buffer overflow in the openaifffile function in demuxaiff.c for xine-lib libxine 1-rc7 allows remote attackers to execute arbitrary code via a crafted AIFF file...