9169 matches found
CVE-2001-1469
The CVE-2001-1469 entry concerns the RC4-based use in SSH1, where remote attackers can modify messages without detection by XOR’ing the original message CRC with the CRC of a mask of the modified bits. Affected component is the RC4 stream cipher implementation within SSH1; impact is partial integ...
CVE-2004-1618
Vypress Tonecast 1.3 and earlier allows remote attackers to cause a denial of service application crash via a malformed mp2 stream...
CVE-2004-1310
Stack-based buffer overflow in the asfmmststreaming.c functionality for MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a large MMST stream packet...
CVE-2004-1310
Stack-based buffer overflow in the asfmmststreaming.c functionality for MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a large MMST stream packet...
CVE-2004-1285
Buffer overflow in the getheader function in asfmmststreaming.c for MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a crafted ASF video stream...
CVE-2004-1285
Buffer overflow in the getheader function in asfmmststreaming.c for MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a crafted ASF video stream...
CVE-2004-1285
CVE-2004-1285 affects MPlayer 1.0pre5; a buffer overflow in the get_header function in asf_mmst_streaming.c can allow remote attackers to execute arbitrary code via a crafted ASF video stream. Descriptions from NVD/SUSE confirm the vulnerability; exploitation status and specific patches are not d...
CVE-2004-1310
Stack-based buffer overflow in the asfmmststreaming.c functionality for MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a large MMST stream packet...
iDEFENSE Security Advisory 12.16.04: MPlayer Bitmap Parsing Remote Heap Overflow Vulnerability
MPlayer Bitmap Parsing Remote Heap Overflow Vulnerability iDEFENSE Security Advisory 12.16.04 http://www.idefense.com/application/poi/display?id=168 December 16, 2004 I. BACKGROUND MPlayer is a movie player for Linux that also runs on many other Unices, and non- x86 CPUs. It plays most MPEG, VOB,...
Multiple Vendor - TCP Session Acknowledgement Number Denial of Service
// source: https://www.securityfocus.com/bid/13215/info Multiple Vendor TCP/IP stack implementations are reported prone to a denial of service vulnerability. A report indicates that the vulnerability manifests when an erroneous TCP acknowledgement number is encountered in an active TCP session...
CVE-2004-1618
Vypress Tonecast 1.3 and earlier allows remote attackers to cause a denial of service application crash via a malformed mp2 stream...
Vypress Tonecast 1.3 - Remote Denial of Service
Vypress Tonecast 1.3 - Remote Denial of Service source: https://www.securityfocus.com/bid/11462/info Vypress Tonecast is reported prone to a remote denial of service vulnerability. It is reported that, when handled, a sufficiently malformed audio stream will cause the affected software to crash. ...
Vypress Tonecast 1.3 - Remote Denial of Service
source: https://www.securityfocus.com/bid/11462/info Vypress Tonecast is reported prone to a remote denial of service vulnerability. It is reported that, when handled, a sufficiently malformed audio stream will cause the affected software to crash. An attacker may exploit this condition to deny...
GLSA-200405-24 : MPlayer, xine-lib: vulnerabilities in RTSP stream handling
The remote host is affected by the vulnerability described in GLSA-200405-24 MPlayer, xine-lib: vulnerabilities in RTSP stream handling Multiple vulnerabilities have been found and fixed in the RTSP handling code common to recent versions of these two packages. These vulnerabilities include sever...
SSH < 1.2.25 CBC/CFB Data Stream Injection
Binary data 1978.prm...
MPlayer, xine-lib: vulnerabilities in RTSP stream handling
Background MPlayer is a movie player capable of handling multiple multimedia file formats. xine-lib is a multimedia player library used by several graphical user interfaces, including xine-ui. They both use the same code to handle Real-Time Streaming Protocol RTSP streams from RealNetworks server...
xine-lib update
New xine-lib packages are available for Slackware 9.1 and -current to fix a security issue where playing a specially crafted Real RTSP stream could run malicious code as the user playing the stream. More details about this issue may be found in this advisory:...
Roger Wilco Server 1.4.1 - Unauthorized Audio Stream Denial of Service
Roger Wilco Server 1.4.1 - Unauthorized Audio Stream Denial of Service source: https://www.securityfocus.com/bid/10025/info A vulnerability has been reported in the Roger Wilco Server, it is reported that a user does not need to connect to the server over the TCP port to have UDP based audio...
Roger Wilco Server 1.4.1 - Unauthorized Audio Stream Denial of Service
source: https://www.securityfocus.com/bid/10025/info A vulnerability has been reported in the Roger Wilco Server, it is reported that a user does not need to connect to the server over the TCP port to have UDP based audio streams handled. Rather the attacker will require knowledge of user ID's...
Etherleak information leak in Windows Server 2003 drivers
NGSSoftware Insight Security Research Advisory Name: Etherleak information leak in Windows Server 2003 drivers Systems Affected: Windows Server 2003 all versions Severity: Low/Medium Risk Vendor URL: http://www.microsoft.com/windowsserver2003/ Author: Chris Paget [email protected] Date: 9th...