Prodder Remote Arbitrary Command Execution

Advisory: Prodder Remote Arbitrary Command Execution RedTeam identified a security flaw in prodder which makes it possible for a malicious podcast server to execute arbitrary shell commands on the victim's client. Details ======= Product: Prodder Affected Versions: All versions up to prodder-0.4...

[Full-disclosure] Apple QuickDraw/QuickTime Multiple Vulnerabilities

McAfee, Inc. McAfee Averttm Labs Security Advisory Public Release Date: 2006-05-11 Apple QuickDraw/QuickTime Multiple Vulnerabilities CVE-2006-1249, CVE-2006-1453, CVE-2006-1454, CVE-2006-1459, CVE-2006-1460, CVE-2006-1461, CVE-2006-1462, CVE-2006-1464, CVE-2006-1465 Synopsis Apple QuickTime and...

MPlayer: Heap-based buffer overflow

Background MPlayer is a media player that supports many multimedia file types. Description Xfocus Team discovered multiple integer overflows that may lead to a heap-based buffer overflow. Impact An attacker could entice a user to play a specially crafted multimedia file, potentially resulting in...

xine-lib: Buffer overflow vulnerability

Background xine-lib is the xine core engine. xine is a free multimedia player. It plays CDs, DVDs, and VCDs, and can also decode other common multimedia formats. Description Federico L. Bossi Bonin discovered that when handling MPEG streams xine-lib fails to make a proper boundary check of the...

MPlayer media player integer overflow

Integer overflow on ASF files playing and different multimedia formats...

[Full-disclosure] [xfocus-SD-060329]MPlayer: Multiple integer overflows

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 xfocus-SD-060329MPlayer: Multiple integer overflows MPlayer is a media player capable of handling multiple multimedia file formats. XFOCUS team http://www.xfocus.org/ had discovered Multiple integer overflows .Those can lead to a heap-based buffer...

RealPlayer: Buffer overflow vulnerability

Background RealPlayer is a multimedia player capable of handling multiple multimedia file formats. Description RealPlayer is vulnerable to a buffer overflow when processing malicious SWF files. Impact By enticing a user to open a specially crafted SWF file an attacker could execute arbitrary code...

[SECURITY] [DSA 1005-1] New xine-lib packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1005-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 16th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1005-1] New xine-lib packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1005-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 16th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1004-1] New vlc packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1004-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 16th, 2006 http://www.debian.org/security/faq -...

DSA-1005-1 xine-lib - buffer overflow

Bulletin has no description...

[SECURITY] [DSA 992-1] New ffmpeg packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 992-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 10th, 2006 http://www.debian.org/security/faq -...

RHEL 2.1 : metamail (RHSA-2006:0217)

An updated metamail package that fixes a buffer overflow vulnerability for Red Hat Enterprise Linux 2.1 is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Metamail is a system for handling multimedia mail. A buffer overflow bug...

Important: Red Hat Security Advisory: metamail security update

An updated metamail package that fixes a buffer overflow vulnerability for Red Hat Enterprise Linux 2.1 is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Metamail is a system for handling multimedia mail. A buffer overflow bug...

GStreamer FFmpeg plugin: Heap-based buffer overflow

Background The GStreamer FFmpeg plugin uses code from the FFmpeg library to provide fast colorspace conversion and multimedia decoders to the GStreamer open source media framework. Description The GStreamer FFmpeg plugin contains derived code from the FFmpeg library, which is vulnerable to a heap...

Apple QuickTime TIFF image "StripByteCounts" integer overflow

Overview Apple QuickTime contains an integer overflow vulnerability in the handling of TIFF images, which may allow a remote unauthenticated attacker to execute arbitrary code or cause a denial of service on a vulnerable system. Description Apple's QuickTime Player is multimedia software that...

Breakthrough in the users permissions broken star Lann-bug warning-the black bar safety net

users permissions are really so low? Our school room has restore card, USB are also sealed, and the BIOS has a super-long password, the external network is also nowhere. Installed VB and the star LAN multimedia network classroom. But with my generation is not going to use VB coding to a broken...

XnView: Privilege escalation

Background XnView is an efficient multimedia viewer, browser and converter, distributed free for non-commercial use. Description Krzysiek Pawlik of Gentoo Linux discovered that the XnView package for IA32 used the DTRPATH field insecurely, causing the dynamic loader to search for shared libraries...

Microsoft DirectShow buffer overflow

Overview A buffer overflow in Microsoft DirectShow may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft DirectShow is a programming architecture for streaming multimedia on the Microsoft Windows platform. An input validation error in...

GLSA-200510-08 : xine-lib: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200510-08 xine-lib: Format string vulnerability Ulf Harnhammar discovered a format string bug in the routines handling CDDB server response contents. Impact : An attacker could submit malicious information about an audio CD to a...