Berkley MPEG Tools symbolic links problem

Insecure temporary files creation...

CVE-2005-3115

mpeg-tools before 1.5b-r2 creates multiple temporary files insecurely, which allows local users to overwrite arbitrary files via 1 ts.stat, 2 ts.mpg, 3 foobar, 4 blockbar, or 5 foobarNNN...

CVE-2005-3115

CVE-2005-3115 affects mpeg-tools = media-video/mpeg-tools-1.5b-r2. No exploit details are provided beyond the local risk in the linked advisories; no mitigation beyond upgrading is described in the available documents.

CVE-2005-3115

mpeg-tools before 1.5b-r2 creates multiple temporary files insecurely, which allows local users to overwrite arbitrary files via 1 ts.stat, 2 ts.mpg, 3 foobar, 4 blockbar, or 5 foobarNNN...

Apple iTunes < 4.8 MPEG-4 File Handling Overflow

Binary data 2889.prm...

DSA-657-1 xine-lib - buffer overflow

Bulletin has no description...

CVE-2004-1379

Heap-based buffer overflow in the DVD subpicture decoder in xine xine-lib 1-rc5 and earlier allows remote attackers to execute arbitrary code via a 1 DVD or 2 MPEG subpicture header where the second field reuses RLE data from the end of the first field...

CVE-2004-1379

CVE-2004-1379 affects xine-lib prior to 0.9.8-2woody3 ( woody) and earlier, with a heap overflow in the DVD subpicture decoder that lets an attacker cause arbitrary code execution by processing a malicious MPEG header. The Debian advisory confirms remote, remote-executable impact via a crafted ne...

DEBIAN-CVE-2004-0805

Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg123 0.59s allows remote attackers to execute arbitrary code via a certain 1 mp3 or 2 mp2 file...

DSA-564-1 mpg123 - missing user input sanitising

Bulletin has no description...

XSA-2004-5: heap overflow in DVD subpicture decoder

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 xine security announcement ========================== Announcement-ID: XSA-2004-5 Summary: A heap overflow has been found in the DVD subpicture decoder of xine-lib. This can be used for a remote heap overflow exploit, which can, on some systems, lead ...

CVE-2004-1379

Heap-based buffer overflow in the DVD subpicture decoder in xine xine-lib 1-rc5 and earlier allows remote attackers to execute arbitrary code via a 1 DVD or 2 MPEG subpicture header where the second field reuses RLE data from the end of the first field...

Xine 0.9.x and Xine-Lib 1 - Multiple Remote File Overwrite Vulnerabilities

Xine 0.9.x and Xine-Lib 1 - Multiple Remote File Overwrite Vulnerabilities source: https://www.securityfocus.com/bid/10193/info It has been reported that the xine media player and the xine media library are affected by multiple remote file overwrite vulnerabilities. This is due to a design error...

MS10-062: Vulnerability in MPEG-4 Codec could allow remote code execution

None None...

MS10-052 Vulnerability in Microsoft MPEG Layer-3 codecs could allow remote code execution

None None...

MS10-026: Vulnerability in Microsoft MPEG Layer-3 codec could allow remote code execution

None None...