Mandriva Linux Security Advisory : xine-lib (MDVSA-2008:046-1)

An array index vulnerability found in the FLAC audio demuxer might allow remote attackers to execute arbitrary code via a crafted FLAC tag, which triggers a buffer overflow. Although originally an MPlayer issue, it also affects xine-lib due to code similarity. The updated packages have been patch...

[ MDVSA-2008:046 ] - Updated xine-lib package fixes arbitrary code execution vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:046 http://www.mandriva.com/security/ Package : xine-lib Date : February 15, 2008 Affected: 2007.1, 2008.0 Problem Description: An array index vulnerability found in the FLAC audio demuxer might allow remote...

mplayer heap overflow in http requests

A remotely exploitable heap buffer overflow vulnerability was found in MPlayer's URL decoding code. If an attacker can cause MPlayer to visit a specially crafted URL, arbitrary code execution with the privileges of the user running MPlayer may occur. A visit' might be caused by social engineering...