MPlayer, xine-lib: vulnerabilities in RTSP stream handling

Background MPlayer is a movie player capable of handling multiple multimedia file formats. xine-lib is a multimedia player library used by several graphical user interfaces, including xine-ui. They both use the same code to handle Real-Time Streaming Protocol RTSP streams from RealNetworks server...

xine-lib update

New xine-lib packages are available for Slackware 9.1 and -current to fix a security issue where playing a specially crafted Real RTSP stream could run malicious code as the user playing the stream. More details about this issue may be found in this advisory:...

Roger Wilco Server 1.4.1 - Unauthorized Audio Stream Denial of Service

Roger Wilco Server 1.4.1 - Unauthorized Audio Stream Denial of Service source: https://www.securityfocus.com/bid/10025/info A vulnerability has been reported in the Roger Wilco Server, it is reported that a user does not need to connect to the server over the TCP port to have UDP based audio...

Roger Wilco Server 1.4.1 - Unauthorized Audio Stream Denial of Service

source: https://www.securityfocus.com/bid/10025/info A vulnerability has been reported in the Roger Wilco Server, it is reported that a user does not need to connect to the server over the TCP port to have UDP based audio streams handled. Rather the attacker will require knowledge of user ID's...

Etherleak information leak in Windows Server 2003 drivers

NGSSoftware Insight Security Research Advisory Name: Etherleak information leak in Windows Server 2003 drivers Systems Affected: Windows Server 2003 all versions Severity: Low/Medium Risk Vendor URL: http://www.microsoft.com/windowsserver2003/ Author: Chris Paget [email protected] Date: 9th...

CVE-2003-0209

Integer overflow in the TCP stream reassembly module stream4 for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence numbers in packets, which enable a heap-based buffer overflow...

snort multiple bugs

Integer overflow during TCP stream processing leads to heap overflow. Heap overflow in stream4 filter...

CVE-2003-0209

CVE-2003-0209 : Snort 2.0 and earlier contains an integer overflow in the TCP stream4 preprocessor used for TCP stream reassembly. This heap-based overflow can be exploited remotely via large TCP sequence numbers to execute arbitrary code, typically as the Snort user (likely root). Multiple sourc...

CVE-2003-0209

Integer overflow in the TCP stream reassembly module stream4 for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence numbers in packets, which enable a heap-based buffer overflow...

CVE-2003-0209

Removed by vendor...

CORE-2003-0307: Snort TCP Stream Reassembly Integer Overflow Vulnerability

Core Security Technologies Advisory http://www.coresecurity.com Snort TCP Stream Reassembly Integer Overflow Vulnerability Date Published: 2003-04-15 Last Update: 2003-04-15 Advisory ID: CORE-2003-0307 Bugtraq ID: 7178 CVE Name: None currently assigned Title: Snort TCP Stream Reassembly Integer...

Problems with Snort-1.9.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Problem: Snort-1.9.1 using a default snort.conf configuration does not detect certain crafted packets. Details: Snort-1.9.1 does not detect packets when the SYN,FIN and ECN echo bits set. The following is an example of a packet: 12:37:12.386797...

eSafe gateway fails to catch virii if used in CVP

Subject: eSafe gateway fails to catch virii if used in CVP Affected: eSafe gateway v3.5.126.0 Vendor: Aladdin Knowlege Systems Author: Igor U.Miturin [email protected] Date: February, 5 2003 Risk: Average Vendor Notified: No I. Intro eSafe gateway is a suite of content filtering product...

PT-2002-2279 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.9.7 and earlier Description: The issue allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via malformed packets to the 1 LMP, 2 PPP, or 3 TDS dissectors. This could be related to...

Allied Telesyn switches & routers vulnerability

Hello, all The problem: Zero stream DoS switch! We have tested switches of Allied Telesyn, 8024 and Rapier24. We have installed the latest firmware from AT site. Testing: 1. Scan for open ports on switch assume switch address 192.168.0.13: nmap -v -sT 192.168.0.13 Starting nmap V. 2.54BETA22...

Pserv 2.0 - HTTP Request Parsing Buffer Overflow

source: https://www.securityfocus.com/bid/6287/info A buffer overflow vulnerability has been reported in Pserv. The buffer overflow condition is due to the way Pserv handles data streams from remote connections. An attacker can exploit this vulnerability by issuing a HTTP request with an overly...

Reproducing the MS DCE-RPC DOS.

Attached to this e-mail is a Java program and a data file which can be used to manually reproduce the DCE-RPC DOS from SPIKE v2.7. Compile it first with: $ javac EtherealReplay.java Then run it with: $ java EtherealReplay 192.168.x.x 135 windowsrpckill You may need to wait a few seconds before...

Microsoft Windows Media Player buffer overflow in Active Stream Redirector (.asx) file parser

Overview There is a buffer overflow in the parsing of Active Stream Redirector .ASX files. This buffer overflow may allow a remote attacker to execute arbitrary code when a user views a malicious web page. Description There is a buffer overflow in the processing of Active Stream Redirector .ASX...

Microsoft Windows Media Player buffer overflow in Active Stream Redirector (.asx) file parser

Overview There is a buffer overflow in the parsing of Active Stream Redirector .ASX files. This buffer overflow may allow a remote attacker to execute arbitrary code when a user views a malicious web page. Description There is a buffer overflow in the processing of Active Stream Redirector .ASX...

CVE-2002-0728

Buffer overflow in the progressive reader for libpng 1.2.x before 1.2.4, and 1.0.x before 1.0.14, allows attackers to cause a denial of service crash via a PNG data stream that has more IDAT data than indicated by the IHDR chunk...