2318 matches found
[SECURITY] [DSA 1005-1] New xine-lib packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1005-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 16th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1004-1] New vlc packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1004-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 16th, 2006 http://www.debian.org/security/faq -...
DSA-1005-1 xine-lib - buffer overflow
Bulletin has no description...
[SECURITY] [DSA 992-1] New ffmpeg packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 992-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 10th, 2006 http://www.debian.org/security/faq -...
RHEL 2.1 : metamail (RHSA-2006:0217)
An updated metamail package that fixes a buffer overflow vulnerability for Red Hat Enterprise Linux 2.1 is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Metamail is a system for handling multimedia mail. A buffer overflow bug...
Important: Red Hat Security Advisory: metamail security update
An updated metamail package that fixes a buffer overflow vulnerability for Red Hat Enterprise Linux 2.1 is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Metamail is a system for handling multimedia mail. A buffer overflow bug...
GStreamer FFmpeg plugin: Heap-based buffer overflow
Background The GStreamer FFmpeg plugin uses code from the FFmpeg library to provide fast colorspace conversion and multimedia decoders to the GStreamer open source media framework. Description The GStreamer FFmpeg plugin contains derived code from the FFmpeg library, which is vulnerable to a heap...
Apple QuickTime TIFF image "StripByteCounts" integer overflow
Overview Apple QuickTime contains an integer overflow vulnerability in the handling of TIFF images, which may allow a remote unauthenticated attacker to execute arbitrary code or cause a denial of service on a vulnerable system. Description Apple's QuickTime Player is multimedia software that...
Breakthrough in the users permissions broken star Lann-bug warning-the black bar safety net
users permissions are really so low? Our school room has restore card, USB are also sealed, and the BIOS has a super-long password, the external network is also nowhere. Installed VB and the star LAN multimedia network classroom. But with my generation is not going to use VB coding to a broken...
XnView: Privilege escalation
Background XnView is an efficient multimedia viewer, browser and converter, distributed free for non-commercial use. Description Krzysiek Pawlik of Gentoo Linux discovered that the XnView package for IA32 used the DTRPATH field insecurely, causing the dynamic loader to search for shared libraries...
Microsoft DirectShow buffer overflow
Overview A buffer overflow in Microsoft DirectShow may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft DirectShow is a programming architecture for streaming multimedia on the Microsoft Windows platform. An input validation error in...
GLSA-200510-08 : xine-lib: Format string vulnerability
The remote host is affected by the vulnerability described in GLSA-200510-08 xine-lib: Format string vulnerability Ulf Harnhammar discovered a format string bug in the routines handling CDDB server response contents. Impact : An attacker could submit malicious information about an audio CD to a...
RealPlayer, Helix Player: Format string vulnerability
Background RealPlayer is a multimedia player capable of handling multiple multimedia file formats. Helix Player is an open source media player for Linux. Description "c0ntex" reported that RealPlayer and Helix Player suffer from a heap overflow. Impact By enticing a user to play a specially craft...
Rhapsody vidplin.dll AVI Processing Heap Overflow Vulnerability
The remote installation of Rhapsody has a heap overflow in the 'vidplin.dll' file used to process AVI files. With a specially- crafted AVI file, an attacker can exploit this flaw to cause arbitrary code to be run within the context of the affected application when a user opens the file. C Tenable...
PeerCast p2p multimedia broadcasting format string vulnerability
Format string bug on HTTP request parsing...
FlexCast Server Terminal Authentication Unspecified Remote Issue
The remote host is running FlexCast, an audio/video streaming server. According to its banner, the version installed on the remote host suffers from a vulnerability in suppliers / terminal authentication. While details are as-yet unavailable, it is likely the flaw is remotely exploitable...
GLSA-200504-27 : xine-lib: Two heap overflow vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200504-27 xine-lib: Two heap overflow vulnerabilities Heap overflows have been found in the code handling RealMedia RTSP and Microsoft Media Services streams over TCP MMST. Impact : By setting up a malicious server and enticing a...
xine-lib: Two heap overflow vulnerabilities
Background xine-lib is a multimedia library which can be utilized to create multimedia frontends. Description Heap overflows have been found in the code handling RealMedia RTSP and Microsoft Media Services streams over TCP MMST. Impact By setting up a malicious server and enticing a user to use i...
nokia_mms_gateway_vuln.txt
Nokia Terminal Gateway TGW is a server application used to deliver multimedia messages to users with GSM handsets that do not support MMS. Nokia Terminal Gateway is used by about 90 GSM operators all over the world. When somebody sends you a multimedia message and it is not delivered to your...