MPlayer和VLC Player real数据传送远程整数下溢漏洞

Bugraq ID: 35821 CNCAN ID：CNCAN-2009072802 MPlayer和VLC Player是流行的媒体播放器。 MPlayer和VLC Player不正确处理用户提供的输入，远程攻击者可以利用漏洞进行整数下溢攻击，可能以应用程序权限执行任意指令。 Mplayer 源文件: stream/realrtsp/real.c function: int realgetrdtchunkrtspt rtspsession, char buffer, int rdtrawdata VLC 源文件: modules/access/rtsp/real.c function:...

[Full-disclosure] [DZC-2009-001] The Movie Player and VLC Media Player Real Data Transport parsing integer underflow.

Advisory: The Movie Player and VLC Media Player Real Data Transport parsing integer underflow. Affected products: The Movie player svn r29438 1 VLC media player = 1.0.0 2 Possible others applications that use the xine lib code 3. Discovred by: tixxDZ tixxdz at gmail dot com DZCORE Labs, Algeria...

Debian: Security Advisory (DSA-1782-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1782-1 (mplayer)

The remote host is missing an update to mplayer announced via advisory DSA 1782-1. OpenVAS Vulnerability Test $Id: deb17821.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1782-1 mplayer Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian DSA-1782-1 : mplayer - several vulnerabilities

Several vulnerabilities have been discovered in mplayer, a movie player for Unix-like systems. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0385 It was discovered that watching a malformed 4X movie file could lead to the execution of arbitrary...

[SECURITY] [DSA 1782-1] New mplayer packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1782-1 [email protected] http://www.debian.org/security/ Steffen Joeris April 29, 2009 http://www.debian.org/security/faq -...

DSA-1782-1 mplayer - arbitrary code execution

Bulletin has no description...

CVE-2009-1440

Incomplete blacklist vulnerability in DownloadListCtrl.cpp in amule 2.2.4 allows remote attackers to conduct argument injection attacks into a command for mplayer via a crafted filename...

CVE-2009-1440

Incomplete blacklist vulnerability in DownloadListCtrl.cpp in amule 2.2.4 allows remote attackers to conduct argument injection attacks into a command for mplayer via a crafted filename...

DEBIAN-CVE-2009-1440

Incomplete blacklist vulnerability in DownloadListCtrl.cpp in amule 2.2.4 allows remote attackers to conduct argument injection attacks into a command for mplayer via a crafted filename...

CVE-2009-1440

Incomplete blacklist vulnerability in DownloadListCtrl.cpp in amule 2.2.4 allows remote attackers to conduct argument injection attacks into a command for mplayer via a crafted filename...

CVE-2009-1440

Incomplete blacklist vulnerability in DownloadListCtrl.cpp in amule 2.2.4 allows remote attackers to conduct argument injection attacks into a command for mplayer via a crafted filename...

Mandriva Linux Security Advisory : mplayer (MDVSA-2008:219)

A vulnerability that was discovered in xine-lib that allowed remote RTSP servers to execute arbitrary code via a large streamid SDP parameter also affects MPlayer CVE-2008-0073. Several integer overflows were discovered by Felipe Andres Manzano in MPlayer's Real video stream demuxing code. These...

Mandriva Linux Security Advisory : mplayer (MDVSA-2008:045)

Heap-based buffer overflow in the rmffdumpcont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows remote attackers to execute arbitrary code via the SDP Abstract attribute, related to the rmffdumpheader function and related to disregarding the max field. Although originally a...

Mandriva Linux Security Advisory : mplayer (MDVSA-2009:013)

Several vulnerabilities have been discovered in mplayer, which could allow remote attackers to execute arbitrary code via a malformed TwinVQ file CVE-2008-5616, and in ffmpeg, as used by mplayer, related to the execution of DTS generation code CVE-2008-4866 and incorrect handling of DCAMAXFRAMESI...

Mandriva Linux Security Advisory : xine-lib (MDVSA-2008:046-1)

An array index vulnerability found in the FLAC audio demuxer might allow remote attackers to execute arbitrary code via a crafted FLAC tag, which triggers a buffer overflow. Although originally an MPlayer issue, it also affects xine-lib due to code similarity. The updated packages have been patch...

Mandriva Linux Security Advisory : mplayer (MDVSA-2008:196)

Uncontrolled array index in the sdpplinparse function in stream/realrtsp/sdpplin.c in MPlayer 1.0 rc2 allows remote attackers to overwrite memory and execute arbitrary code via a large streamid SDP parameter. The updated packages have been patched to fix this issue. %NASLMINLEVEL 70300 C Tenable...

Mandriva Linux Security Advisory : mplayer (MDVSA-2009:014)

Several vulnerabilities have been discovered in mplayer, which could allow remote attackers to execute arbitrary code via a malformed TwinVQ file CVE-2008-5616, and in ffmpeg, as used by mplayer, related to the execution of DTS generation code CVE-2008-4866. The updated packages have been patched...

Mandriva Update for mplayer MDVSA-2008:219 (mplayer)

Check for the Version of mplayer OpenVAS Vulnerability Test Mandriva Update for mplayer MDVSA-2008:219 mplayer Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for mplayer MDKSA-2007:143 (mplayer)

Check for the Version of mplayer OpenVAS Vulnerability Test Mandriva Update for mplayer MDKSA-2007:143 mplayer Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...