Design/Logic Flaw

MPlayer allows remote attackers to cause a denial of service application crash via 1 a malformed AAC file, as demonstrated by lol-vlc.aac; or 2 a malformed Ogg Media OGM file, as demonstrated by lol-ffplay.ogm, different vectors than CVE-2007-6718...

CVE-2008-4610

MPlayer allows remote attackers to cause a denial of service application crash via 1 a malformed AAC file, as demonstrated by lol-vlc.aac; or 2 a malformed Ogg Media OGM file, as demonstrated by lol-ffplay.ogm, different vectors than CVE-2007-6718...

CVE-2008-4610

MPlayer allows remote attackers to cause a denial of service application crash via 1 a malformed AAC file, as demonstrated by lol-vlc.aac; or 2 a malformed Ogg Media OGM file, as demonstrated by lol-ffplay.ogm, different vectors than CVE-2007-6718...

CVE-2008-4610

MPlayer allows remote attackers to cause a denial of service application crash via 1 a malformed AAC file, as demonstrated by lol-vlc.aac; or 2 a malformed Ogg Media OGM file, as demonstrated by lol-ffplay.ogm, different vectors than CVE-2007-6718...

CVE-2008-4610

CVE-2008-4610 concerns MPlayer (with bundled FFmpeg) and is triggered by parsing malformed media files, causing a denial of service via application crash. The description cites two vectors: a malformed AAC file (lol-vlc.aac) and a malformed Ogg Media (OGM) file (lol-ffplay.ogm), with different ve...

CVE-2007-6718

MPlayer, possibly 1.0rc1, allows remote attackers to cause a denial of service SIGSEGV and application crash via 1 a malformed MP3 file, as demonstrated by lol-mplayer.mp3; 2 a malformed Ogg Vorbis file, as demonstrated by lol-mplayer.ogg; 3 a malformed MPEG-1 file, as demonstrated by...

CVE-2008-4610

MPlayer allows remote attackers to cause a denial of service application crash via 1 a malformed AAC file, as demonstrated by lol-vlc.aac; or 2 a malformed Ogg Media OGM file, as demonstrated by lol-ffplay.ogm, different vectors than CVE-2007-6718...

RealPlayer/Helix Player Remote Format String Exploit (linux)

No description provided by source. / $ An open security advisory 13 - RealPlayer and Helix Player Remote Format String Exploit 1: Bug Researcher: c0ntex - c0ntexbatgmail.com 2: Bug Released: September 26th 2005 3: Bug Impact Rate: Hi 4: Bug Scope Rate: Remote $ This advisory and/or proof of conce...

Fedora 9 : xine-lib-1.1.15-1.fc9 (2008-7512)

This release fixes multiple bugs and security issues: - DoS via corrupted Ogg files CVE-2008-3231 - multiple possible buffer overflows detailed in oCERT-2008-008 For more details, see: http://sourceforge.net/project/shownotes.php?releaseid=619869&groupi d=9655...

FreeBSD Ports: libvorbis

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: libvorbis

The remote host is missing an update to the system as announced in the referenced advisory. VID f5a76faf-244c-11dd-b143-0211d880e350 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

xine-lib Multiple Vulnerabilities

xine-lib is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-3231

xine-lib before 1.1.15 allows remote attackers to cause a denial of service crash via a crafted OGG file, as demonstrated by playing lol-ffplay.ogg with xine...

Design/Logic Flaw

xine-lib before 1.1.15 allows remote attackers to cause a denial of service crash via a crafted OGG file, as demonstrated by playing lol-ffplay.ogg with xine...

CVE-2008-3231

xine-lib before 1.1.15 allows remote attackers to cause a denial of service crash via a crafted OGG file, as demonstrated by playing lol-ffplay.ogg with xine...

CVE-2008-3231

xine-lib before 1.1.15 allows remote attackers to cause a denial of service crash via a crafted OGG file, as demonstrated by playing lol-ffplay.ogg with xine...

CVE-2008-3231

xine-lib before 1.1.16.3 is affected by CVE-2008-3231, with a remote denial of service via crafted OGG files (as demonstrated by lol-ffplay.ogg). Multiple open-source advisories (Red Hat, Gentoo GLSA, Mandriva/OpenVAS listings) confirm remote crash scenarios triggered while parsing various media ...

libxine -- denial of service vulnerability

xine team reports: A new xine-lib version is now available. This release contains some security fixes, notably a DoS via corrupted Ogg files CVE-2008-3231, some related fixes, and fixes for a few possible buffer overflows...

GLSA-200806-09 : libvorbis: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200806-09 libvorbis: Multiple vulnerabilities Will Drewry of the Google Security Team reported multiple vulnerabilities in libvorbis: A zero value for 'codebook.dim' is not properly handled, leading to a crash, infinite loop or...

[SECURITY] [DSA 1591-1] New libvorbis packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1591-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst June 03, 2008 http://www.debian.org/security/faq -...