Winamp < 5.541 NowPlaying Feature Metadata XSS

The remote host is running Winamp, a media player for Windows. The version of Winamp installed on the remote host is earlier than 5.541. Such versions reportedly contain a cross-site scripting vulnerability involving the software's 'NowPlaying' feature because the embedded browser fails to saniti...

MS00-038:Microsoft Media Encoder 拒绝服务漏洞

Windows Media Encoder是Windows Media Services的一部分。它是用来将数字内容转化为 Windows多媒体格式，以便通过运行在Windows NT或者Windows 2000上的多媒体服务程序发 送。 如果发送一个错误格式的请求给Windows Media Encoder,它就会出错崩溃，不能再将格式 化好的多媒体数据传送给Windoes Media Server. - Microsoft Windows Media Encoder 4.0 - Microsoft Windows Media Encoder 4.1 + Microsoft Windo...

Code injection

Nortel SIP Multimedia PC Client 4.x MCS5100 and MCS5200 does not limit the number of concurrent sessions, which allows attackers to cause a denial of service resource consumption via a large number of sessions...

CVE-2008-3157

Nortel SIP Multimedia PC Client 4.x MCS5100 and MCS5200 does not limit the number of concurrent sessions, which allows attackers to cause a denial of service resource consumption via a large number of sessions...

CVE-2008-3157

Nortel SIP Multimedia PC Client 4.x MCS5100 and MCS5200 does not limit the number of concurrent sessions, which allows attackers to cause a denial of service resource consumption via a large number of sessions...

CVE-2008-3157

CVE-2008-3157 affects Nortel SIP Multimedia PC Client 4.x MCS5100 and MCS5200. The vulnerability stems from not limiting concurrent sessions, enabling denial of service via a large number of sessions. The NVD lists a CVSS v2 base score of 5.0 (Medium) with network access, low attack complexity, a...

Nortel SIP多媒体PC客户端会话处理拒绝服务漏洞

Nortel Networks公司推出的SIP多媒体PC客户端是一个功能全面的多媒体即时通讯工具。 SIP多媒体PC客户端没有限制可生成的连接或活动窗口的数量，未经认证的远程攻击者可以创建大量会话，直到系统无法处理，导致耗尽客户端系统上的可用资源。 Nortel Networks 多媒体PC客户端SIP电话 4.x Novell ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://support.novell.com/security-alerts...

Apple QuickTime Player 7.5修复多个安全漏洞

BUGTRAQ ID: 29619 CVECAN ID: CVE-2008-1581,CVE-2008-1582,CVE-2008-1583,CVE-2008-1584,CVE-2008-1585 Apple QuickTime是一款非常流行的多媒体播放器。 QuickTime的7.5之前版本存在多个安全漏洞，允许用户通过畸形的媒体文件获得敏感信息或完全入侵用户系统。 CVE-2008-1581 QuickTime在处理PICT图形中的PixData结构时存在堆溢出漏洞，如果用户受骗打开了恶意的PICT图形的话就会导致播放器终止或执行任意指令。 CVE-2008-1582...

Apple Mac OS X multiple security vulnerabilities

AFP server directory traversal, Apache updates, AppKit memory corruption, Apple Pixlet Video multiple memory corruptions, Apple Type Services PDF printing fonts memory corruption, SSL information leak, multiple vulnerabilities in Graphics and Image engines on different filetypes and multimedia...

DSA-1586-1 xine-lib - multiple vulnerabilities

Bulletin has no description...

Nortel SIP多媒体PC客户端远程报文洪水拒绝服务漏洞

BUGTRAQ ID: 28994 Nortel SIP多媒体PC客户端是基于PC的应用程序，可提供强大的多媒体通讯功能。 Nortel SIP处理大量报文时存在漏洞，远程攻击者可能利用此漏洞导致程序崩溃不可用。 如果使用Nessus扫描工具向Nortel SIP多媒体PC客户端发送了大量报文的话，就可能触发缓冲区溢出，导致客户端出现错误消息并终止。 Nortel Networks 多媒体PC客户端SIP电话 4.0 Nortel Networks 多媒体PC客户端SIP电话 3.5 Nortel Networks ---------------...

[SECURITY] Fedora 8 Update: xine-lib-1.1.12-2.fc8

This package contains the Xine library. Xine is a free multimedia player. It can play back various media. It also decodes multimedia files from local disk drives, and displays multimedia streamed over the Internet. It interprets many of the most common multimedia formats available - and some of t...

[SECURITY] Fedora 7 Update: xine-lib-1.1.11.1-1.fc7.2

This package contains the Xine library. Xine is a free multimedia player. It can play back various media. It also decodes multimedia files from local disk drives, and displays multimedia streamed over the Internet. It interprets many of the most common multimedia formats available - and some of t...

Debian DSA-1552-1 : mplayer - missing input sanitising

It was discovered that the MPlayer movie player performs insufficient input sanitising on SDP session data, leading to potential execution of arbitrary code through a malformed multimedia stream. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Debian Security Advisory DSA 1552-1 (mplayer)

The remote host is missing an update to mplayer announced via advisory DSA 1552-1. OpenVAS Vulnerability Test $Id: deb15521.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1552-1 mplayer Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

DSA-1552-1 mplayer - arbitrary code execution

Bulletin has no description...

[SECURITY] Fedora 8 Update: xine-lib-1.1.11.1-1.fc8

This package contains the Xine library. Xine is a free multimedia player. It can play back various media. It also decodes multimedia files from local disk drives, and displays multimedia streamed over the Internet. It interprets many of the most common multimedia formats available - and some of t...

[SECURITY] Fedora 7 Update: xine-lib-1.1.11.1-1.fc7

This package contains the Xine library. Xine is a free multimedia player. It can play back various media. It also decodes multimedia files from local disk drives, and displays multimedia streamed over the Internet. It interprets many of the most common multimedia formats available - and some of t...

Apple QuickTime多个远程安全漏洞

BUGTRAQ ID: 28583 CVECAN ID: CVE-2008-1013,CVE-2008-1014,CVE-2008-1015,CVE-2008-1016,CVE-2008-1017,CVE-2008-1018,CVE-2008-1019,CVE-2008-1020,CVE-2008-1021,CVE-2008-1022,CVE-2008-1023 Apple QuickTime是一款非常流行的多媒体播放器。 QuickTime的7.4.5之前版本存在多个安全漏洞，允许用户通过畸形的媒体文件获得敏感信息或完全入侵用户系统。 CVE-2008-1013...

Adobe Flash Player Multimedia File Remote Buffer Overflow Vulnerability

Description Adobe Flash Player is prone to a remote buffer-overflow vulnerability when handling multimedia files with certain tags. An attacker may exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in...