GLSA-200504-21 : RealPlayer, Helix Player: Buffer overflow vulnerability

The remote host is affected by the vulnerability described in GLSA-200504-21 RealPlayer, Helix Player: Buffer overflow vulnerability Piotr Bania has discovered a buffer overflow vulnerability in RealPlayer and Helix Player when processing malicious RAM files. Impact : By enticing a user to play a...

RealPlayer, Helix Player: Buffer overflow vulnerability

Background RealPlayer is a multimedia player capable of handling multiple multimedia file formats. Helix Player is the Open Source version of RealPlayer. Description Piotr Bania has discovered a buffer overflow vulnerability in RealPlayer and Helix Player when processing malicious RAM files. Impa...

CVE-2005-0755: Undefined Security Weakness

Heap-based buffer overflow in RealPlayer 10 and earlier, Helix Player before 10.0.4, and RealOne Player v1 and v2 allows remote attackers to execute arbitrary code via a long hostname in a RAM file...

SUSE-SA:2005:026: RealPlayer

The remote host is missing the patch for the advisory SUSE-SA:2005:026 RealPlayer. This update fixes a security issue within the RealPlayer media player. A remote attacker could craft a special .RAM Real Audio Media file which would cause a buffer overflow when played within RealPlayer. This is t...

HelixPlayer security update

CentOS Errata and Security Advisory CESA-2005:392 An updated HelixPlayer package that fixes a buffer overflow issue is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. HelixPlayer is a media player. A buffer overflow bug was found...

Critical: Red Hat Security Advisory: RealPlayer security update

An updated RealPlayer package that fixes a buffer overflow issue is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. RealPlayer is a media player that provides solid media playback locally and via streaming. It plays RealAudio,...

RealPlayer media player buffer overflow

Buffer overflow on RAM real media audio files parsing...

USN-103-1: Linux kernel vulnerabilities

Mathieu Lafon discovered an information leak in the ext2 file system driver. When a new directory was created, the ext2 block written to disk was not initialized, so that previous memory contents which could contain sensitive data like passwords became visible on the raw device. This is...

DEBIAN-CVE-2004-1034

Buffer overflow in the httpopen function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long Content-Type header for a Real Audio Media .ram playlist file...

CVE-2004-0478

The CVE-2004-0478 entry describes a DoS flaw in Mozilla where JavaScript can trigger an infinite loop that appends input to a form (potentially via control characters such as an embedded ctrl-U), causing high CPU/RAM usage. Affected versions are not precisely specified; the impact is denial of se...

Linux news 20.07.00

Linux 2.0.39pre6 Вышла новая pre-версия очередного ядра из старой стабильной серии: Linux 2.0.39pre6. Подробнее: Linux Kernel pre-patch 2.4.0 test5-pre3 Вышел очередной, третий по счету, пятого тестового ядра Linux - Linux Kernel 2.4.0. Подробнее: ftp://ftp.funet.fi/pub/linux/kernel/testing Kerne...