Integer overflow

Integer overflow in the CSoundFile::ReadMed function src/loadmed.cpp in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted 1 song comment or 2 song name, which triggers a...

CVE-2009-1438

Integer overflow in the CSoundFile::ReadMed function src/loadmed.cpp in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted 1 song comment or 2 song name, which triggers a...

CVE-2009-1438

Integer overflow in the CSoundFile::ReadMed function src/loadmed.cpp in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted 1 song comment or 2 song name, which triggers a...

CVE-2009-1438

Integer overflow in the CSoundFile::ReadMed function src/loadmed.cpp in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted 1 song comment or 2 song name, which triggers a...

MDVA-2008:181 : gstreamer0.10-plugins-ugly

A bug in the ASF demuxer in gstreamer0.10-plugins-ugly prevented video players like Totem from seeking in WMV files, causing an error message Internal data stream error. This updated package contains a patch fixing this problem. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as...

MDVA-2008:170 : alsa-plugins

The version of alsa-plugins provided with Mandriva Linux 2009.0 fails when trying to record sound via alsa using pulseaudio. This updated package contains an upstream patch to fix this bug. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...

Mandriva Linux Security Advisory : gstreamer-plugins-good (MDVSA-2008:092)

A vulnerability in the Speex library was found where it did not properly validate input values read from the Speex files headers. An attacker could create a malicious Speex file that would crash an application or potentially allow the execution of arbitrary code with the privileges of the...

Mandriva Linux Security Advisory : gstreamer0.10-plugins-good (MDVSA-2009:035)

Security vulnerabilities have been discovered and corrected in gstreamer0.10-plugins-good, might allow remote attackers to execute arbitrary code via a malformed QuickTime media file CVE-2009-0386, CVE-2009-0387, CVE-2009-0397. The updated packages have been patched to prevent this. %NASLMINLEVEL...

Mandriva Linux Security Advisory : gstreamer0.10-plugins-base (MDVSA-2009:085)

Integer overflows in gstreamer0.10-plugins-base Base64 encoding and decoding functions related with glib2.0 issue CVE-2008-4316 may lead attackers to cause denial of service. Altough vector attacks are not known yet CVE-2009-0586. This update provide the fix for that security issue. %NASLMINLEVEL...

Mozilla Foundation Security Advisory 2009-20

Mozilla Foundation Security Advisory 2009-20 Title: Malicious search plugins can inject code into arbitrary sites Impact: Low Announced: April 21, 2009 Reporter: Prateek Saxena Products: Firefox Fixed in: Firefox 3.0.9 Description Security researcher Prateek Saxena reported that a malicious...

Ubuntu 7.10 / 8.04 LTS / 8.10 : gst-plugins-good0.10 vulnerabilities (USN-736-1)

It was discovered that GStreamer Good Plugins did not correctly handle malformed Composition Time To Sample ctts atom data in Quicktime mov movie files. If a user were tricked into opening a crafted mov file, an attacker could execute arbitrary code with the privileges of the user invoking the...

Fedora 10 : gstreamer-plugins-good-0.10.13-1.fc10 (2009-1213)

Mon Jan 26 2009 - Bastien Nocera - 0.10.13-1 - Update to 0.10.13 - Update libv4l patch - Wed Jan 14 2009 Warren Togami 0.10.11-4 - Bug 477877 Fix multilib conflict in -devel - Bug 478449 Fix ladspa on lib64 - Wed Jan 14 2009 Lennart Poettering 0.10.11-3 - Bug 470000 Fix thread/memleak due to...

Mandriva Linux Security Advisory : xine-lib (MDVSA-2009:020)

Failure on Ogg files manipulation can lead remote attackers to cause a denial of service by using crafted files CVE-2008-3231. Failure on manipulation of either MNG or Real or MOD files can lead remote attackers to cause a denial of service by using crafted files CVE: CVE-2008-5233. Heap-based...

FreeBSD : mozilla -- multiple vulnerabilities (3b18e237-2f15-11de-9672-0030843d3802)

Mozilla Foundation reports : MFSA 2009-22: Firefox allows Refresh header to redirect to javascript: URIs MFSA 2009-21: POST data sent to wrong site when saving web page with embedded frame MFSA 2009-20: Malicious search plugins can inject code into arbitrary sites MFSA 2009-19: Same-origin...

mozilla -- multiple vulnerabilities

Mozilla Foundation reports: MFSA 2009-22: Firefox allows Refresh header to redirect to javascript: URIs MFSA 2009-21: POST data sent to wrong site when saving web page with embedded frame MFSA 2009-20: Malicious search plugins can inject code into arbitrary sites MFSA 2009-19: Same-origin...

CentOS Security Advisory CESA-2009:0352 (gstreamer-plugins-base)

The remote host is missing updates to gstreamer-plugins-base announced in advisory CESA-2009:0352. CESA-2009:0352 63821 2 $Id: ovcesa20090352.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:0352 gstreamer-plugins-base Authors: Thomas Reinke Copyright:...

CentOS Security Advisory CESA-2009:0352 (gstreamer-plugins-base)

The remote host is missing updates to gstreamer-plugins-base announced in advisory CESA-2009:0352. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Mandriva Update for gstreamer0.10-plugins-ugly MDVA-2008:181 (gstreamer0.10-plugins-ugly)

Check for the Version of gstreamer0.10-plugins-ugly OpenVAS Vulnerability Test Mandriva Update for gstreamer0.10-plugins-ugly MDVA-2008:181 gstreamer0.10-plugins-ugly Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Mandriva Update for alsa-plugins MDVA-2008:170 (alsa-plugins)

Check for the Version of alsa-plugins OpenVAS Vulnerability Test Mandriva Update for alsa-plugins MDVA-2008:170 alsa-plugins Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Update for gstreamer-plugins-good MDVSA-2008:092 (gstreamer-plugins-good)

Check for the Version of gstreamer-plugins-good OpenVAS Vulnerability Test Mandriva Update for gstreamer-plugins-good MDVSA-2008:092 gstreamer-plugins-good Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software;...