xine-lib多个堆溢出漏洞

BUGTRAQ ID: 28370 xine是一款免费的媒体播放器，支持多种格式。 xine在计算某些目标缓冲区和数组所需分配的内存数时错误的32位计算，导致xine-lib受多个堆溢出漏洞影响，可能允许攻击者控制寄存器和代码流。 以下是有漏洞的代码部分： ----------------------------- A demuxflv堆溢出 ----------------------------- src/demuxers/demuxflv.c： static int parseflvvardemuxflvt this, unsigned char buf, int size, ch...

[SECURITY] Fedora 8 Update: xine-lib-1.1.11-1.fc8

This package contains the Xine library. Xine is a free multimedia player. It can play back various media. It also decodes multimedia files from local disk drives, and displays multimedia streamed over the Internet. It interprets many of the most common multimedia formats available - and some of t...

xine-lib sdpplin_parse()函数远程溢出漏洞

BUGTRAQ ID: 28312 CVECAN ID: CVE-2008-0073 xine是一款免费的媒体播放器，支持多种格式。 xine的input/libreal/sdpplin.c文件中的sdpplinparse函数存在缓冲区溢出漏洞，如果恶意的RTSP流中包含有超长的SDP参数的话，就可能触发这个溢出，导致执行任意指令。 xine-lib 1.1.10.1 xine ---- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://xinehq.de/...

Multiple heap overflows in xine-lib 1.1.11

Luigi Auriemma Application: xine-lib http://xinehq.de Versions: = 1.1.11 Platforms: Linux, BSD, Solaris, Irix, MacOSX, Windows and others Bugs: A heap-overflow in demuxflv B heap-overflow in demuxqt C heap-overflow in demuxreal D heap-overflow in demuxwc3movie E heap-overflow in ebml F...

Xine-Lib 1.1.11 - Multiple Heap Remote Buffer Overflow Vulnerabilities

Xine-Lib 1.1.11 - Multiple Heap Remote Buffer Overflow Vulnerabilities // source: https://www.securityfocus.com/bid/28370/info The 'xine-lib' library is prone to multiple heap-based buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied input...

Xine-Lib 1.1.11 - Multiple Heap Remote Buffer Overflow Vulnerabilities

// source: https://www.securityfocus.com/bid/28370/info The 'xine-lib' library is prone to multiple heap-based buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied input. Attackers can exploit these issues to execute arbitrary code in the context o...

CVE-2008-1161

Buffer overflow in the Matroska demuxer demuxers/demuxmatroska.c in xine-lib before 1.1.10.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a Matroska file with invalid frame sizes...

Buffer overflow

Buffer overflow in the Matroska demuxer demuxers/demuxmatroska.c in xine-lib before 1.1.10.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a Matroska file with invalid frame sizes...

CVE-2008-1161

Buffer overflow in the Matroska demuxer demuxers/demuxmatroska.c in xine-lib before 1.1.10.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a Matroska file with invalid frame sizes...

CVE-2008-1161

Buffer overflow in the Matroska demuxer demuxers/demuxmatroska.c in xine-lib before 1.1.10.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a Matroska file with invalid frame sizes...

CVE-2008-1161: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Matroska demuxer demuxers/demuxmatroska.c in xine-lib before 1.1.10.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a Matroska file with invalid frame sizes...

Buffer overflow

Buffer overflow in demuxers/demuxasf.c aka the ASF demuxer in the xineplugdmxasf.so plugin in xine-lib before 1.1.10 allows remote attackers to execute arbitrary code or cause a denial of service crash via a crafted ASF header. NOTE: this issue leads to a crash when an attack uses the CVE-2006-16...

CVE-2008-1110

Buffer overflow in demuxers/demuxasf.c aka the ASF demuxer in the xineplugdmxasf.so plugin in xine-lib before 1.1.10 allows remote attackers to execute arbitrary code or cause a denial of service crash via a crafted ASF header. NOTE: this issue leads to a crash when an attack uses the CVE-2006-16...

CVE-2008-1110

Buffer overflow in demuxers/demuxasf.c aka the ASF demuxer in the xineplugdmxasf.so plugin in xine-lib before 1.1.10 allows remote attackers to execute arbitrary code or cause a denial of service crash via a crafted ASF header. NOTE: this issue leads to a crash when an attack uses the CVE-2006-16...

CVE-2008-1110

The CVE-2008-1110 issue affects the xine-lib ASF demuxer (xineplug_dmx_asf.so) prior to 1.1.10. The ASF header length is not properly checked, causing a buffer overflow in the demuxer that can lead to remote code execution or a denial of service (crash). Remediation: update to xine-lib 1.1.10 or ...

CVE-2008-1110

Buffer overflow in demuxers/demuxasf.c aka the ASF demuxer in the xineplugdmxasf.so plugin in xine-lib before 1.1.10 allows remote attackers to execute arbitrary code or cause a denial of service crash via a crafted ASF header. NOTE: this issue leads to a crash when an attack uses the CVE-2006-16...

Remote file inclusion

PHP remote file inclusion vulnerability in lib/headauth.php in GROUP-E 1.6.41 allows remote attackers to execute arbitrary PHP code via a URL in the CFGPREPENDFILE parameter...

CVE-2008-1074: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in lib/headauth.php in GROUP-E 1.6.41 allows remote attackers to execute arbitrary PHP code via a URL in the CFGPREPENDFILE parameter...

CVE-2008-1110: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in demuxers/demuxasf.c aka the ASF demuxer in the xineplugdmxasf.so plugin in xine-lib before 1.1.10 allows remote attackers to execute arbitrary code or cause a denial of service crash via a crafted ASF header. NOTE: this issue leads to a crash when an attack uses the CVE-2006-16...

CVE-2008-1074

CVE-2008-1074 affects GROUP-E 1.6.41, where lib/head_auth.php fails to validate CFG[PREPEND_FILE], enabling remote inclusion of arbitrary files and potential PHP code execution. Root cause: inadequate input validation for the PREPEND_FILE parameter leading to local/remote file inclusion. Impact: ...