CVE-2006-1664

CVE-2006-1664 concerns a buffer overflow in xine_list_delete_current within libxine (v1.14 and earlier; as distributed in xine-lib v1.1.1 and earlier). The flaw permits remote code execution via a crafted MPEG stream. The entry lists a NETWORK attack vector with no authentication, no user interac...

CVE-2006-1664

Buffer overflow in xinelistdeletecurrent in libxine 1.14 and earlier, as distributed in xine-lib 1.1.1 and earlier, allows remote attackers to execute arbitrary code via a crafted MPEG stream...

[EXPL] Libxine MPEG Stream Buffer Overflow (Exploit)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Xine / libxine buffer overflow

Buffer overflow on MPEG stream parsing...

Libxine 1.14 - MPEG Stream Buffer Overflow (PoC)

Libxine 1.14 - MPEG Stream Buffer Overflow PoC !/usr/bin/perl Libxine = 1.14 : MPEG Stream Buffer overflow vulnerability / PoC Federico L. Bossi Bonin fbossiatnetcomm.com.ar gdb run /tmp/egg.mpeg Starting program: /usr/bin/gxine /tmp/egg.mpeg Program received signal SIGSEGV, Segmentation fault...

Libxine <= 1.14 MPEG Stream Buffer Overflow Vulnerability PoC

No description provided by source. !/usr/bin/perl Libxine = 1.14 : MPEG Stream Buffer overflow vulnerability / PoC Federico L. Bossi Bonin fbossiatnetcomm.com.ar gdb run /tmp/egg.mpeg Starting program: /usr/bin/gxine /tmp/egg.mpeg Program received signal SIGSEGV, Segmentation fault. Switching to...

Libxine <= 1.14 MPEG Stream Buffer Overflow Vulnerability PoC

Exploit for linux platform in category dos / poc ============================================================= Libxine = 1.14 MPEG Stream Buffer Overflow Vulnerability PoC ============================================================= !/usr/bin/perl Libxine = 1.14 : MPEG Stream Buffer overflow...

Libxine 1.14 - MPEG Stream Buffer Overflow (PoC)

!/usr/bin/perl Libxine = 1.14 : MPEG Stream Buffer overflow vulnerability / PoC Federico L. Bossi Bonin fbossiatnetcomm.com.ar gdb run /tmp/egg.mpeg Starting program: /usr/bin/gxine /tmp/egg.mpeg Program received signal SIGSEGV, Segmentation fault. Switching to Thread -1276580944 LWP 30688...

FreeBSD : mplayer & libxine -- MMS and Real RTSP buffer overflow vulnerabilities (91c606fc-b5d0-11d9-a788-0001020eed82)

A xine security announcement reports : By a user receiving data from a malicious network streaming server, an attacker can overrun a heap buffer, which can, on some systems, lead to or help in executing attacker-chosen malicious code with the permissions of the user running a xine-lib based media...

FreeBSD : libxine -- buffer-overflow vulnerability in aiff support (64c8cc2a-59b1-11d9-8a99-000c6e8f12ef)

Due to a buffer overflow in the openaifffile function in demuxaiff.c, a remote attacker is able to execute arbitrary code via a modified AIFF file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML...

FreeBSD : libxine -- multiple vulnerabilities in VideoCD handling (b6939d5b-64a1-11d9-9106-000a95bc6fae)

A xine security announcement states : Several string overflows on the stack have been fixed in xine-lib, some of them can be used for remote buffer overflow exploits leading to the execution of arbitrary code with the permissions of the user running a xine-lib based media application. Stack-based...

FreeBSD : libxine -- multiple buffer overflows in RTSP (1b70bef4-649f-11d9-a30e-000a95bc6fae)

A xine security announcement states : Multiple vulnerabilities have been found and fixed in the Real-Time Streaming Protocol RTSP client for RealNetworks servers, including a series of potentially remotely exploitable buffer overflows. This is a joint advisory by the MPlayer and xine teams as the...

FreeBSD : libxine (1939)

The following package needs to be updated: libxine %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006 Jacques Vidrine and contributors Redistribution and use in source VuXML and 'compiled' forms SGML, HTML, PDF,...

FreeBSD : libxine -- DVD subpicture decoder heap overflow (131bd7c4-64a3-11d9-829a-000a95bc6fae)

A xine security announcement states : A heap overflow has been found in the DVD subpicture decoder of xine-lib. This can be used for a remote heap overflow exploit, which can, on some systems, lead to or help in executing malicious code with the permissions of the user running a xine-lib based...

mplayer & libxine -- MMS and Real RTSP buffer overflow vulnerabilities

A xine security announcement reports: By a user receiving data from a malicious network streaming server, an attacker can overrun a heap buffer, which can, on some systems, lead to or help in executing attacker-chosen malicious code with the permissions of the user running a xine-lib based media...

DSA-657-1 xine-lib - buffer overflow

Bulletin has no description...

Debian DSA-657-1 : xine-lib - buffer overflow

A heap overflow has been discovered in the DVD subpicture decoder of xine-lib. An attacker could cause arbitrary code to be executed on the victims host by supplying a malicious MPEG. By tricking users to view a malicious network stream, this is remotely exploitable. %NASLMINLEVEL 70300 C Tenable...

libxine -- buffer-overflow vulnerability in aiff support

Due to a buffer overflow in the openaifffile function in demuxaiff.c, a remote attacker is able to execute arbitrary code via a modified AIFF file...