1611 matches found
CVE-2006-1664
Buffer overflow in xinelistdeletecurrent in libxine 1.14 and earlier, as distributed in xine-lib 1.1.1 and earlier, allows remote attackers to execute arbitrary code via a crafted MPEG stream...
CVE-2006-1664
Buffer overflow in xinelistdeletecurrent in libxine 1.14 and earlier, as distributed in xine-lib 1.1.1 and earlier, allows remote attackers to execute arbitrary code via a crafted MPEG stream...
CVE-2006-1664: Undefined Security Weakness
Buffer overflow in xinelistdeletecurrent in libxine 1.14 and earlier, as distributed in xine-lib 1.1.1 and earlier, allows remote attackers to execute arbitrary code via a crafted MPEG stream...
[EXPL] Libxine MPEG Stream Buffer Overflow (Exploit)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
Xine / libxine buffer overflow
Buffer overflow on MPEG stream parsing...
Libxine 1.14 - MPEG Stream Buffer Overflow (PoC)
!/usr/bin/perl Libxine = 1.14 : MPEG Stream Buffer overflow vulnerability / PoC Federico L. Bossi Bonin fbossiatnetcomm.com.ar gdb run /tmp/egg.mpeg Starting program: /usr/bin/gxine /tmp/egg.mpeg Program received signal SIGSEGV, Segmentation fault. Switching to Thread -1276580944 LWP 30688...
Libxine <= 1.14 MPEG Stream Buffer Overflow Vulnerability PoC
No description provided by source. !/usr/bin/perl Libxine = 1.14 : MPEG Stream Buffer overflow vulnerability / PoC Federico L. Bossi Bonin fbossiatnetcomm.com.ar gdb run /tmp/egg.mpeg Starting program: /usr/bin/gxine /tmp/egg.mpeg Program received signal SIGSEGV, Segmentation fault. Switching to...
Libxine 1.14 - MPEG Stream Buffer Overflow (PoC)
Libxine 1.14 - MPEG Stream Buffer Overflow PoC !/usr/bin/perl Libxine = 1.14 : MPEG Stream Buffer overflow vulnerability / PoC Federico L. Bossi Bonin fbossiatnetcomm.com.ar gdb run /tmp/egg.mpeg Starting program: /usr/bin/gxine /tmp/egg.mpeg Program received signal SIGSEGV, Segmentation fault...
CVE-2005-4582
Electric Sheep 2.6.3 does not require authentication or integrity checks from the server to the client, which allows remote attackers to download and display arbitrary MPEG movie files via 1 DNS spoofing, 2 a URL on the command line, or 3 a URL in the configuration file. NOTE: the same attack...
CVE-2005-4582
Electric Sheep 2.6.3 does not require authentication or integrity checks from the server to the client, which allows remote attackers to download and display arbitrary MPEG movie files via 1 DNS spoofing, 2 a URL on the command line, or 3 a URL in the configuration file. NOTE: the same attack...
CVE-2005-4582: Undefined Security Weakness
Electric Sheep 2.6.3 does not require authentication or integrity checks from the server to the client, which allows remote attackers to download and display arbitrary MPEG movie files via 1 DNS spoofing, 2 a URL on the command line, or 3 a URL in the configuration file. NOTE: the same attack...
GLSA-200510-02 : Berkeley MPEG Tools: Multiple insecure temporary files
The remote host is affected by the vulnerability described in GLSA-200510-02 Berkeley MPEG Tools: Multiple insecure temporary files Mike Frysinger of the Gentoo Security Team discovered that mpegencode and the conversion utilities were creating temporary files with predictable or fixed filenames...
[Full-disclosure] [ GLSA 200510-02 ] Berkeley MPEG Tools: Multiple insecure temporary files
Gentoo Linux Security Advisory GLSA 200510-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
Berkley MPEG Tools symbolic links problem
Insecure temporary files creation...
Berkeley MPEG Tools: Multiple insecure temporary files
Background The Berkeley MPEG Tools are a collection of utilities for manipulating MPEG video technology, including an encoder mpegencode and various conversion utilities. Description Mike Frysinger of the Gentoo Security Team discovered that mpegencode and the conversion utilities were creating...
CVE-2005-3115
mpeg-tools before 1.5b-r2 creates multiple temporary files insecurely, which allows local users to overwrite arbitrary files via 1 ts.stat, 2 ts.mpg, 3 foobar, 4 blockbar, or 5 foobarNNN...
CVE-2005-3115
mpeg-tools before 1.5b-r2 creates multiple temporary files insecurely, which allows local users to overwrite arbitrary files via 1 ts.stat, 2 ts.mpg, 3 foobar, 4 blockbar, or 5 foobarNNN...
CVE-2005-3115
CVE-2005-3115 affects mpeg-tools = media-video/mpeg-tools-1.5b-r2. No exploit details are provided beyond the local risk in the linked advisories; no mitigation beyond upgrading is described in the available documents.
CVE-2005-3115: Undefined Security Weakness
mpeg-tools before 1.5b-r2 creates multiple temporary files insecurely, which allows local users to overwrite arbitrary files via 1 ts.stat, 2 ts.mpg, 3 foobar, 4 blockbar, or 5 foobarNNN...